Pillar: P — Privacy / Digital Sovereignty · ← All Protocols
About this protocol
This protocol covers protecting online accounts from being hacked, phished, or taken over. The two building blocks are a password manager, which creates and stores a unique, strong password for every account, and a hardware security key, a physical second factor that a fake login page cannot trick you into handing over.
Together they mean one leaked password does not open every account, and a stolen password alone is not enough to log in.
I’m a layperson, not a doctor, financial advisor, or lawyer. Nothing here is advice. Do your own research and talk to a professional about your own situation.
Products & Services I Use
1Password
What it is: A password manager: an app that creates and stores a unique, strong password for every account in an encrypted vault that syncs across your devices.
Why I use it: I currently use 1Password because I have found it incredibly convenient. I consider it a vital component of my personal cybersecurity that reduces my risk of being hacked or scammed. I secure my 1Password account with YubiKey 2FA.
YubiKey
What it is: A small physical security key used as a second factor when logging in.
Why I use it: YubiKey has been shown to be the most effective form of Two Factor Authentication. I personally have three Yubikeys securing my 1Password vault. I keep one on my person, one in my fireproof safe, and the other in the fireproof safe of a trusted relative. I may soon get a fourth to bring with me when travelling in case the one I carry on my person is somehow lost.
Sources: Google, NYU, and UC San Diego study of 350,000+ hijacking attempts: security keys blocked 100% of automated, bulk phishing, and targeted attacks.
