As you get more attention, be more aware of your cybersecurity... (use 2FA)

Updated Jan 9, 2023

Click the following links, one by one, and follow the instructions to enable 2-factor authentication on these important websites (assuming you use those websites regularly)... 

  1. Google

  2. FB

  3. Instagram

  4. LinkedIn

  5. Paypal

  6. Stripe (scroll down to Two-step authentication)

  7. Any other payment methods you use
Comments
RK
Looks like the link for Linkedin is broken.
GK
George Kao Ⓜ️ MasterHeart 💗 Conversation Booster 🔤 ABC

@Roxanne Koh (Therapy Without Boxes) I just tried it and it works? Maybe you have to be logged into LinkedIn first, then try the link.  If not, then perhaps it's an issue of being in a different country and LinkedIn uses a different link there. If so, log into your LinkedIn, go to Settings, then click "Sign in and security".
MB

I only had 2FA for PayPal. Now adding other accounts. Thank you!

VN

Thank you for this reminder. I checked my accounts and now all squared away!

AE

@George Kao - the instructions for PayPal no longer work and I can't find anything through PayPal. any chance you have some kind of extra info on that? It doesn't even have a link for 2-SA and their help box doesn't recognize it either.  

GK
George Kao Ⓜ️ MasterHeart 💗 Conversation Booster 🔤 ABC

@Angie Evans I'm seeing it under Profile Settings > Login and security > 2-step verification.  See if that helps?

MS

@George Kao I have 2 factor set up for everything but Paypal, I'm realizing, so thank you for speaking to this! Looks like Paypal gives limited options and I'm needing to set up through the  google authenticator app. A bit nervous about what might happen if I lose my phone, do you have any suggestions on ways to set things up in case I lose my phone? 
GK
George Kao Ⓜ️ MasterHeart 💗 Conversation Booster 🔤 ABC

@megan spencer you're right that you'd have to really trust not to lose your phone by using a mobile app like Google Authenticator.  Less secure but still better than no 2FA is to use SMS or email based authentication... usually an option that they give you. 

Alternatively you would need to use a service like https://authy.com/features/...

...which allows you to have authentication via multiple devices.

AE

@George Kao - Do you have a resource to set up Google Authenticator on a Google account. I'd prefer that to getting a text.  Thanks.

GK
George Kao Ⓜ️ MasterHeart 💗 Conversation Booster 🔤 ABC

@Angie Evans Yes, go to your mobile phone app store and search Google Authenticator.  It should be the one that has 100 Million downloads (skip the ones that merely have 1 million downloads!)

WP

As I am venturing into new territory by creating a video podcast, this has definitely been a topic of interest to me. I greatly appreciate @George Kao's comments on cookies since that directly addresses one of my concerns. I also like having the reminder and encouragement to remain mindful as I make my way into a space that I have needed to retreat from often due to personal needs of mental health and clarity. All that said, I wanted to share another resource that I have found useful and offers an added layer of peace of mind. 

I recently learned about hardware keys for cyber security. I came to hear about these when watching a video by a mid-sized YouTube channel that was raising the awareness of more popular channels falling victim to hackers. This particular YouTuber lost control of their channel due to 2FA fatigue, which can happen to larger businesses with enough people that they were not always staying mindful of the source of 2FA prompts. It subsequently took a couple weeks to regain control of their channel and content once. I do not want to increase feelings of fear, especially when I believe building a personal sense of mindfulness can probably prevent a similar situation from happening. However, I thought it was worth mentioning, since I plan to incorporate the use of hardware keys in addition to 2FA.

I will also share a link to the cybersecurity YouTuber who spoke about these devices, but since I am still new to this space, I'm not entirely sure if that's allowed. I am inclined to think it is ok to share links to resources for information or educational purposes, but please correct me if I missed something.

https://youtu.be/L5V9JDG3cfQ

GK
George Kao Ⓜ️ MasterHeart 💗 Conversation Booster 🔤 ABC

@Whitney Perrine Thanks for sharing!  I'm still not seeing the need to go beyond 2FA at this time. It's too much. Most people don't even have 2FA yet, so we need to spread the message about that first.  The video you shared -- they're selling a product as an affiliate, so we need to be especially aware of the commercial intent there :)

CL

I appreciate you reminding us to be vigilant. I will check the setting for this 2FA as well.

RR

Hi George, so thoughtful and practical of you to generate this disucussion and to guide us on how to prevent it.
I am savvy but one 'potential' weak area is my web based e mail address which does not have 2 factor authentiation. I do have quite alot of e mail addresses - luckily my YT is a gmail but there are weaknesses in areas where I use my domain web based e mail. 
I will remain vigilant and (as yet) have also never been hacked and I hope it stays like that as it is a horrible experience!

CC

Ok everyone I will check my 2 factor authorizations  

JH

George,  I realized you had done this video on cyber security.  Great.  Not sure but I started to get more active on Linked in as I am listening to your workshop and boom, I get this email to my business email address which was  saying they had taken over my website.  It went to a different internet provider and looked at my website.  looked fine.  But now I am not sure.  Is there something I should do to check it again.  It looks okay but thought maybe I am not checking properly.  And I deleted that email of course.  Was really creepy!!

GK
George Kao STAFF Ⓜ️ MasterHeart 🔤 ABC

@Jeanne Hartman sadly, we are all starting to get more spam/scam emails that try to get our attention by saying our website or some other account has been compromised.  If you are able to access it and another friend can, then I wouldn't worry about it.  Over time you'll start to learn how to quickly tell these scams.  As a rule: don't click on any links from strangers and disbelieve their warnings.

CF

Thanks for the helpful and important reminder.

RS

Thank you for the heads up reminder on using 2 factor authorization etc etc!!

DB

Do you recommend having a VPN, or using something like TOR browser? 

GK
George Kao STAFF Ⓜ️ MasterHeart 🔤 ABC

@Devora Gila Berkowitz I don't use either one at home, but if planning to use public wifi eg. when traveling, I would definitely use VPN.

DB

@George Kao  Could you explain more? Wouldn't it be more vulnerable to be at home without a VPN ; ie. same address all the time and easily identified? Why the danger in the public wifi? Because you are on a network with other computers? 

GK
George Kao STAFF Ⓜ️ MasterHeart 🔤 ABC

@Devora Gila Berkowitz Yes, correct. 

Public or any shared WiFi means you might be sharing it with a hacker. 

But if the only people with access to your home WiFi are trusted, and you are generally savvy with what websites you log into, you probably don't need VPN. 

Most sites we log into these days are https so it's already encrypted.

More here:

 https://www.vice.com/en/art...

LG

Hi. I'd appreciate the phishing scam video link you mentioned. Thanks!

GK
George Kao STAFF Ⓜ️ MasterHeart 🔤 ABC

@Laura Greiner thanks for the reminder! Here it is: https://youtu.be/SeISXKN-paA

MW

Thanks for the reminder about 2-factor authentication!