Using two-factor authentication, taking a moment to verify the legitimacy of transactions, and using "safe" words can keep your data safe from malicious online actors this holiday season, experts say.