Gimnicher Computer Services
  • Home
  • About
  • Testimonials
  • Technology Blog
  • Newsletters prior to 2015
  • Remote Support
  • Contact
  • Search this Site

Start Using Two Factor Authentication NOW!

5/10/2016

0 Comments

 
​Here is a scenario: a hacker figures out your iCloud/AppleID password and logs into your account over the web.  He changes your password, immediately locking you out of your account, breaking your ability to send email and messages via your iCloud account.  He takes note of your birthday, billing address, alternate email addresses, and that you have a credit card stored.  He looks at your sent and received emails, notes, calendar entries, iCloud drive documents, contacts, etc.  He appreciates your photos and takes note of the places you like to visit. 
 
He will be very busy now seeing if he can hack into your other accounts using the same or a similar password and creating spam and/or viruses for all your contacts.  But first, he needs to do a bit of shopping.  He grabs an iPhone and logs into your iCloud account using his new password.  He downloads all your past applications, songs, and movie purchases and then buys a bunch more, using the credit card associated with your account. 
 
Pretty scary, huh?  This actually happened to someone I know just this week.  She thought she had a strong password, but obviously it was not strong enough.  Many of us use Apple’s iCloud because it is so convenient for storing our data and using that stored data to automatically synchronize that data across our various devices.  But, because it is such a vast and varied repository of our personal information, it is also a keen target for hackers.
 
We all know by now that our passwords have to be long, made up of non-real words plus a mixture of upper case, lower case, and special characters.  And, the password needs to be unique for every website.  Unfortunately, I suspect that many of you do not follow this advice.  Whether you do or don’t, what else can be done to keep hackers from being able to log into our web-based accounts?
 
The answer is Two Factor Authentication (commonly known as 2FA).  2FA provides an extra layer of security to help prevent unauthorized access to your web accounts.  Some websites implement it by default, but most offer it as an option that you have to explicitly enable.  Dashlane, Lastpass, Amazon, Dropbox, Facebook, Apple, Google, Microsoft, Yahoo, Wells Fargo, and Chase are examples of websites that offer 2FA.
 
The way 2FA works is to require one extra step in logging into your account.  Once you have successfully entered the correct account id and password, the website will ask you for a code.  That code can be set up in advance to be texted or emailed to a specific phone number or email address.  If the code is not used within a short period of time, it will expire.  The code is different with each login. That code represents the second factor in authentication and is delivered to you via something personal that presumably only your have (like your cell phone).  No correct code entry, no successful login.  So you can see that without this second piece of information, a hacker will not be able to log into your account.  Most websites allow you to specify whether 2FA should be used with every login or only with logins from devices that have never accessed the website before.
 
What I have described is a simplified version of implementing 2FA and it can be a bit more complicated in actual set up.  But regardless, if you care about protecting your web-accessible data, start using Two Factor Authentication NOW!!!
0 Comments



Leave a Reply.

    Author

    Hi!  This is Steve. I've created this blog to share technology information relevant to you: the home or small business user of computers and mobile devices.

    Archives

    October 2023
    June 2023
    January 2023
    November 2022
    June 2022
    October 2021
    June 2021
    November 2020
    September 2020
    August 2020
    June 2020
    May 2020
    March 2020
    February 2020
    January 2020
    December 2019
    October 2019
    September 2019
    August 2019
    July 2019
    June 2019
    May 2019
    April 2019
    March 2019
    January 2019
    November 2018
    October 2018
    September 2018
    June 2018
    May 2018
    April 2018
    March 2018
    January 2018
    December 2017
    November 2017
    October 2017
    September 2017
    July 2017
    June 2017
    May 2017
    April 2017
    March 2017
    February 2017
    January 2017
    December 2016
    November 2016
    October 2016
    September 2016
    August 2016
    July 2016
    June 2016
    May 2016
    April 2016
    March 2016
    February 2016
    January 2016
    December 2015
    November 2015
    October 2015
    September 2015
    August 2015
    July 2015
    June 2015
    May 2015
    April 2015
    March 2015
    February 2015
    January 2015

    Categories

    All

    RSS Feed

    Subscribe to our mailing list

    * indicates required

This site follows Gimnicher Computer Services’ standard Privacy Policy and Terms of Use.
​Redwood City Business License Tax # 48438

Copyright © 2010 - 2024