March 19, 2024--Wow, have I been busy, but unfortunately not with
needlepoint. Recently my husband and I have
become aware of the need to “lock down”, for security purposes, all of our
online dealings, such as with email, financial, shopping and entertainment accounts. This
has entailed educating ourselves on the meaning and use of MFAs (Multi-Factor Authentications)
that go beyond 2FAs (2 Factor Authentications where, in addition to using a password,
a code is sent to your telephone via text to verify your identity).
You can stop reading here if this subject is of no interest
to you (and I wouldn’t blame you for that).
We felt secure with 2FAs, but not so much now that "sim swapping" has
become very popular. We understand that even if your mobile carrier requires a security code before they’ll
work with you, or someone claiming to be you, there is no guarantee that a disgruntled employee of the company
will not sell your data (and security code) to the highest bidder (and that’s already being done). So now, as part of the MFA arsenal, are online authenticator
“passkeys” which give you a code to verify who you are, but the code changes every
30 seconds or so and is not sent through a text, but through an authenticator
app. This means anyone who obtains
access to your phone probably cannot move quickly enough to cause you any
financial hurt.
But I understand the very best thing for online security now is to use hardware
passkeys like those made by Yubiko*. The idea
is to set up two passkeys (one to keep with you and one to keep in a safe in
case you lose one). The process is a
bit involved, but supposedly worth it since your accounts cannot be hacked at
all without your hardware passkey. This
last process in setting up the hardware passkeys is the one that's stressing me
out the most. We're also using biometrics (fingerprint and facial recognition) as often as possible.
Of course, the first line of defense against being hacked is
to use a very long and complex 20+ character password that is different for
every online account. So, I purchased a password manager to
help me keep track of it all and to generate those convoluted passwords. This too took time (I love alliterations).
Lastly, we stamped the following phrase on our foreheads—thou
shall never open phishing links from any source whatsoever (emails, texts, etc.).
NEVER, NEVER, NEVER!!
If you’ve gotten to this point, congratulations! And I feel your pain since you’ve probably
gone through this too. It has taken us
some serious time to learn about, and set up, all the security measures--time I really wanted to spend
needlepointing. Oh well, and here’s the big
sigh……
PS: We haven't been hacked, thank God, but are aware of how sophisticated hackers have become in their attempts to bleed you dry, so we are taking preemptive steps to protect ourselves as much as possible. And I hope my explanations are not too far off base.
*We have no financial affiliation with this company--just like their product.
.jpeg)
Also looking good.