We have to trust the owner of the server to secure our information and respect or privacy.

Can we?

Every cloud service or app stores your data on a central computer system designed to store and share data over a network a.k.a “server”.EvA server can host many users often many millions for example Facebook and Google. It is much more lucrative for criminals to gain access to a server and steal the data from many users rather then going after individual computers.

We should assume that all servers at one point will be breached and criminals will harvest and sell the data on the dark web. Unfortunately the owner of the server might use your data for marketing purposes or share this with others for financial gain.

With a few steps you can make your data less valuable or even useless for others.

Passwords

Use a strong password that is unique for every account. When your password is compromised it will be useless on other accounts. As bonus you don’t have to run around changing the password on every other website you have used it.

Good passwords:

1. Are unique!

2. At least 12 characters!

3. Combination of lower and upper case, numbers and special characters

4. Can be a string of random words (MargaretThatcher=100%Sexy)

5. Computer generated (.Y7c9NU7*RtVr!8y2K-34upa7nR.V7yqbWs)

This is not a good idea either:

• MySecretPasseord98%AZ (Amazon)

• MySecretPasseord98%WF (Wells Fargo)

• MySecretPasseord98%FB (Facebook)

• MySecretPasseord98%EB (Ebay)

• MySecretPasseord98%YA (Yahoo)

Usernames

The username if the name of your account. By using a different username for every account it wil be much harder for criminals and marketing firms to associate your other online accounts. Unfortunately most websites only use an email address as a user account making it easy to be found.

If possible use random names for your user name to register with every online service. Use different email addresses for various services.

Alias email addresses

It’s very impractical to create and maintain many email accounts for all the websites you register with. Alias email accounts make this much easier to manage.

• Apple iCloud offers unlimited alias email addresses with their “Hide my email” service. https://support.apple.com/en-us/105078

• If you are not on the Apple / iCloud platform you can learn more on this website: https://blog.superhuman.com/email-alias-guide/

Using Alias email addresses will cut back on SPAM and Phishing attacks!

Two factor authentication (2FA)

Is a system where you have to provide a code that is only valid for a short amount of time using a device that you own. Its a little bit more hassle but will dramatically increase the security of your account!

2FA examples

1. Code by email (least secure)

2. SMS

3. Authenticator app

4. Confirm access via app on your phone (for example banking app)

5. Passkey

6. Hardware key (Yubikey)

Keeping track of Passwords, Usernames, etc

Avoid using the password manager in Google Chrome.

The web browser is at the frontline of the battle with the bad actors on the internet. If you store all your passwords in with your Gmail account in Google Chrome you take a big risk of being compromised. Apple Safari doesn’t store the passwords inside the browser but in a separate secure application “Keychain” / “Passwords” app.

Use a password manager!

Not only to generate and store passwords. It will be a database with all the different usernames, answers to security questions etc etc. A good password manager that is well integrated in your computer, smartphone or tablet will make logging in much easier.

Properly maintained a password manager will be a very valuable database for all your important information like iD papers, important documents, medical notes etc etc

I highly recommend www.1password.com* Apple’s Password application is also a good alternative that is less comprehensive then 1Password but easier to use.

*Family and business plans with sharing options available

No more passwords with “Passkey’s”!

Is the most sophisticated and secure system that is currently available that is becoming more popular. There is still a limited number of websites offering “Passkeys”. I recommend to store the passkeys in a platform independent password manager like 1Password. This allows you to be flexible in your choice of operating system.

https://www.passkeys.com/