Protecting Yourself and Loved Ones from Scams and Fraud - Part Eight
by Steve Lawler
on Thursday, November 29th, 2018 at 1:00pm.
I'll be posting a series of articles and data related to fraudulent scams, data mining, and threats that are taking over our daily lives. Technology is moving faster than ever in history, and we need to be prepared and knowledgeable in how to protect ourselves and loved ones.
This series will touch on Scam Calls, Data Tracking, Financial Elder abuse, Identity theft and much more. Content posted here from a variety of sources, including AARP, Consumer Reports, The FBI and others. Knowing is Caring. We welcome all feedback.
Would love to hear any ideas you may have for future posts, let me know!
The article below is from AARP.com, and provides great data, along with detailed steps, in setting up a password manager system.
Password Managers: What You Need to Know
Keep your digital life secure — without using sticky notes
When it comes to passwords, is your desk a sea of sticky notes scrawled with cryptic numbers and letters, or can anyone who knows your dog’s name and your three lucky numbers access everything from your bank balance to your Facebook profile?
Yes? Well, you are not alone.
Passwords are needed for just about everything we do in our digital life, but keeping them straight is a challenge. We’re not supposed to use the same password for all our online activity — because if someone guesses or hacks it, they now have access to all your accounts — yet we’re not supposed to write passwords down either.
So, what to do?
Consider a password manager
As the name suggests, a password manager helps you easily create, store and recall passwords. Many of them are both a website and an app, so you have access to all your passwords regardless of what device you’re on.
In most cases, you set up an account by providing your name, email address and a “master” password to enter your digital locker. Once you’re inside, you may see familiar logos for some of the most popular brands on the web, including Facebook, Instagram, Gmail, PayPal, Amazon, Dropbox, Netflix, eBay, Reddit and so on. Or you can create your own for, say, your Internet Service Provider (ISP), favorite news site, bank site, online games or any other place you need a password to use.
Once you tap one, such as Facebook, you’ll be prompted to enter your username and password once, and now it’s stored here for good. In fact, with most of these password managers, you can tap the logo to launch and log you into the app or site in question, thanks to its “auto-fill” feature.
Because most password managers sync your information in the “cloud” (online), you’ll have access to everything, regardless of the device you’re logging in to. Therefore, if you add a new password on your smartphone, and then sit down at your desktop computer later, you'll find that everything has been synchronized.
How secure are they?
For each website or app password you keep, you can choose to require the master password only or a master password and a PIN code or fingerprint (on a mobile phone or tablet) for “two-factor authentication.”
But what if your phone, tablet or laptop is lost or stolen? Can’t someone access all your passwords if they figure out your “master password”? You need not worry about this as your device has to be unlocked first — that is, a person would first need to know your PIN or password — and then guess your master password, too, which is highly unlikely. And since you can log on to your password manager from virtually any device, you can log in from another machine and change your master password — just in case.
As a veteran security researcher, ESET’s Stephen Cobb (eset.com) is familiar with password managers and is generally in favor of them because, as he puts it: “they make it possible for us mere mortals to employ strong passwords across an ever-increasing number of accounts, websites and services.”
But Cobb offers some caveats: “While companies that offer these services are deeply vested in keeping your passwords safe, that is no easy task, so make sure that you are selecting a reputable product.”
Not only do password managers let you keep your favorite passwords, but you can also lean on the app or site to create a tougher password, if desired. All passwords are encrypted with Secure Sockets Layer (SSL) and AES-256, the strongest grade of encryption available (banks use 128- or 256-bit encryption).