What Do You Do With Your Tax Refund In 2018?

Weak passwords can compromise the best security tools and controls. With a never-ending list of applications and services that users and consumers access, people may have dozens of passwords to maintain at any given time. Often, the temptation to use familiar terms such as pet names, favorite teams or the names of children or friends can cause risk since much of those details can be discovered by a simple examination of social media.

Creating strong passwords offers greater security for minimal effort. Weak passwords can compromise the best security tools and controls. With a never-ending list of applications and services that users and consumers access, people may have dozens of passwords to maintain at any given time. Often, the temptation to use familiar terms such as pet names, favorite teams or the names of children or friends can
cause risk since much of those details can be discovered by a simple examination of social media.

Under Lock and Key
You can buy a small padlock for less than a dollar—but you should not count on it to protect anything of value. A thief could probably pick a cheap lock without much effort, or simply break it. And yet, many people use similarly flimsy passwords to “lock up” their most valuable assets, including money and confidential information. Fortunately, everyone can learn how to make and manage stronger passwords. It is an easy way to strengthen security both at work and at home.

What Makes a Password ‘Strong’?
Let’s say you need to create a new password that’s at least 12 characters long, and includes numerals, symbols, and upper- and lowercase letters. You think of a word you can remember, capitalize the first
letter, add a digit, and end with an exclamation point. The result: Strawberry1!

Unfortunately, hackers have sophisticated password-breaking tools that can easily defeat passwords based on dictionary words (like “strawberry”) and common patterns, such as capitalizing the first letter.
Increasing a password’s complexity, randomness, and length can make it more resistant to hackers’ tools. For example, an eight-character password could be guessed by an attacker in less than a day, but a 12-character password would take two weeks. A 20-character password would take 21 centuries. You can learn more about creating strong passwords in your organization’s security awareness training. Your organization may also have guidelines or a password policy in place.

Why Uniqueness Matters
Many people reuse passwords across multiple accounts, and attackers take advantage of this risky behavior. If an attacker obtains one password—even a strong one—they can often use it to access other valuable accounts.

Here is a real-life example: Ten years ago, Alice joined an online gardening forum. She also created an online payment account and used the same password. She soon forgot about the gardening forum, but someone accessed her payments account years later and stole a large sum of money.

Alice did not realize the gardening forum had been hacked, and that users’ login credentials had been
leaked online. An attacker probably tried reusing Alice’s leaked password on popular sites—and
eventually got lucky.

Guarding Your Passwords & PINS. Passwords and PINS protect sensitive data and it's critical to keep them safe. Try these best practices to stay protected.

1. Do not write them down – Many make the mistake of writing passwords on post-it notes and
leaving them in plain sight. Even if you hide your password, someone could still find it. Similarly, do
not store your login information in a file on your computer, even if you encrypt that file.
2. Do not share passwords – You cannot be sure someone else will keep your credentials safe. At
work, you could be held responsible for anything that happens when someone is logged in as you.
3. Do not save login details in your browser – Some browsers store this information in unsafe
ways, and another person could access your accounts if they get your device.
4. Use a password manager – These tools can securely store and manage your passwords and
generate strong new passwords. Some can also alert you if a password may have been
compromised.
5. Never reuse passwords – Create a unique, strong password for each account or device. This
way, a single hacked account does not endanger other accounts.
6. Create complex, long passwords – Passwords based on dictionary words, pets’ names, or other
personal information can be guessed by attackers.

When planning for retirement, you need to look at multiple sources of income and be sure that some of the income sources are tax-free. The more, the better. So, how do you plan for a retirement income stream that minimizes overall taxation?

Four Instruments that Provide tax-free Retirement Income

Here are four great ways to provide yourself with tax-free.

1. Roth IRA is a great retirement investment that can result in a steady stream of tax-free retirement income as long as they are considered qualified. However, you must qualify for an IRA and the requirements are adjusted year by year as is the amount eligible for savings. Withdrawals prior to age 59 ½ or prior to the account being opened for 5 years, whichever is later, may result in a 10% IRS penalty tax. Future tax laws can change at any time and may impact the benefits of Roth IRAs. Their tax treatment may change.

If you do qualify, money put into a Roth IRA is taxed when you receive it, so it is not taxed again when it is withdrawn. In 2018, the eligibility requirements are:

1. Single or head of household, earning less than $120,000 to fully contribute to a Roth IRA.
2. Married filing jointly or a qualified widow(er) earning less than $189,000 to fully contribute to a Roth IRA.
3. Married filing separately earning less than $10,000 to fully contribute to a Roth IRA. (Note that those married but filing separately can use the limits for single people as long as they have not lived with their spouse in the past year)
4. Municipal Bonds and Funds provide income distributions not taxable by the federal government though they are may be subject to state income tax. Because they are not subject to federal income tax, interest paid on these bonds is typically less than taxable bonds.

There is no income limit to investing in tax-free municipal bonds and funds.

3. Health Savings Accounts (HSAs) are available if your employer offers health insurance using an HSA. Combined contributions by the employer and employee to this account as of 2018 can be as high as $6,900.00 for qualifying plans.

Following the rules about which expenses are reimbursable, no taxes are paid on withdrawals.

In addition, the HSA funds and earnings can be held until retirement then uses to provide tax-free income by reimbursing the holder for past and current allowable expenses which include Medicare premiums.

4. Roth 401(k) or 403(b) allow Roth contributions inside these accounts making those contributions and their subsequent retirement earnings, tax-free. These accounts are not subject to income eligibility limits but they are subject to taxes in the year that contributions are made.

Making the Most of Your Home

Another way to make a smart investment for your retirement is to pay off any mortgage that you have on your home before you retire which allows you to live in your home for the cost of property taxes and home insurance alone.

For many retirees, this is a huge reduction in their monthly expenses allowing the money be used elsewhere.