Hi Guys -
All the news over the past year + has made me more concerned about my online security.
Here is an article I was pointed to that seems quite good:
https://medium.com/@yanda/protecting...t-a7e6e7cd21bb
One of the suggestions is an ID Theft Protection company. The author recommends "
AllclearID" but I'd be curious if any of the more techy guys on here have any better solutions for this type of solution (on top of everything else) My thinking is that while this might not be crucial it seems like a good one would be better than nothing…. thoughts welcome
Some Basics:
- Password manager with unique passwords for all sites (buying Trezor on Amazon is a good start)
- 2FA on everything through google authenticator, not authy
- Use a chromebook when possible
- Set a PIN for your phone number provider or remove access / call / text forwarding
- Remove the phone/sms backup option to reset your passwords
MOST IMPORTANTLY:
It is not safe (and is a liability) to use SMS-based 2-Factor Authentication. -- you should lock down your mobile carrier's web access and make sure any changes must be made in-store with photo ID. You don't want to have your phone number (which can be acquired if a hack of a 3rd party like yahoo/Target etc. which you don't remember even putting your phone # down with) on any of your most important accounts as a recovery option.
Read
this article to understand why.
(x-posted in Business / Investing)