New Year, New Beginnings

Hello folks,

Just wanted to start the new year by giving some general security advice on how to keep your digital life secure.  I'll try and break it down as concise as possible while giving the programs I personally use to secure myself.  P.S. (This assumes you run Windows)

New Year's Resolution!

Use a Password Manger (No not your browsers an actual password manager)

The password manager I use is, Keepass (FREE)



This app stores all your passwords and can be secured with a key/password/account.  I recommend using a password "phrase", a whole sentence as your "Master Password."  exp. (ForkthoseCatsASU!)  The main objective is to use such a long difficult passphrase no one can guess (or Bruteforce) but the phrase itself is personal and not easy for you to forget.

A .kdbx file will be made after you create your Master Passphrase.  Consider this your "Keychain".  Personally I put my key file in my Dropbox so I can access it anywhere.  (Keepass and Dropbox apps on your phone will accomplish the same effect.)

Then start filling it with all the websites and logins you have throughout your life.  (Netflix, Steam, email, online banking.)  If you haven't recently changed or are using a weak password; now is a good time to reset your passwords.  Keepass also has a random password generator that you can use to reset all your previous passwords to more difficult ones.

The length of the password is the most important factor, 8 characters used to be a minimum but I would recommend way more than that.

These are YOUR keys to your HOUSE make them STRONG! (LONG).


https://keepass.info/

I'll post some more soon.

Comments

Post a Comment

Popular posts from this blog

A magic-wormhole!

Image
Have you ever struggled to get a file from one computer to another?  What if the file surpasses the size limits of Google Drive or Dropbox? Yes, you can SSH/SCP, FTP, HTTP, USB, script the hell out of it but isn't there something that allows us to transfer large files easily? And is "securely" too much to ask too? https://github.com/warner/magic-wormhole TL;DR, The concept is; you and your recipient would have another secure means to transfer a secure pass-phrase.  The sender would tell the receiver what pass-phrase accesses the package.  The odds somebody else entering the same phrase into the wormhole at the right time is approximately 3720 to 1! (I don't know the exact math but its really hard to MitM)  "The package is at whisky-tango-foxtrot." Here's the -help,  Magic Wormhole supports multiple modes; # Wormhole send                     # Activates prompt for a message to send, Text mes...
Read more

Quick Tip -Sysinternals-

Image
I been slacking on this blogging thing.  Anyway I wanted to show a quick tip that I want to build off going forward with more posts. Sysinternals is a great free tool that can help you with numerous computer issues. https://docs.microsoft.com/en-us/sysinternals/ Another cool thing is Sysinternals Live , basically a website that hosts all the Sysinternals Tools. https://live.sysinternals.com/ The really cool feature I wanted to go over, is mounting this website as a local drive, or calling these tools straight from the command line. P$> \\live.sysinternals.com\tools\procmon.exe This command will fire up procmon.exe. (I got a post coming up for procmon) Syntax= \\live.sysinternals.com\tools\ TOOL.EXE It may take a moment but all the Sysinternals tools are available to you, over the wire.  Pretty neat.  Another way to demonstrate this is by mapping that entire web directory to a location on your computer. Click "This PC" > "Compute...
Read more

How I use Sysinternals

Image
Hey, In my previous post I demonstrated how to add the Sysinternals tools to your computer from  https://live.sysinternals.com/ .  "Neat, now what?"  This is not a comprehensive guide to Sysinternals merely how I use these tools to increase my cyber safety. If you browsed to  https://live.sysinternals.com  you'll notice there is numerous tools.  I just want to quickly show a few of the tools I have found most useful and how I use them. 1.) Sigcheck  - " Sigcheck is a command-line utility that shows file version number, timestamp information, and digital signature details, including certificate chains." You can run it via: PS C:\Users\Matt> \\live.sysinternals.com\tools\sigcheck.exe -h -v "C:\Users\Matt\Downloads\pro cesshacker-3.0.1424-setup.exe" >> sigchecktest.txt This command is run against a "file", usually something you just downloaded/received.  You are unsure about it's safety.  You can run "Sigcheck...
Read more