Encrypt all the things!

I'm using Dashlane after loosing a password for Lastpass way back when...I like it but don't see it as being much different for Lastpass (which I use for work)

There's an export option in lastpass so you can periodically export all your passwords in case Lastpass ever gives up the ghost.

We tried using it at work. It annoyed my mate on OSX because it kept trying to automatically log him in to things that he didn't want to log in to, and I was on linux, and their offerings for linux are shithouse. Had to keep using the mobile app to do basic things like accepting shared passwords from colleagues. We ditched it, but ymmv.

shared passwords

STAHP

uh, yeah, I meant shared secrets. Things like API keys

Oh, dear...

1 Attachment

Looool

So she's paying for the order off her paypal?

Even if they enabled 2FA, 99% of people aren't going to use it. Not saying they shouldn't do it, but just enabling it for your users isn't some magic bullet

Facebook's two-factor authentication puts security and privacy at odds

Stop using your phone number for two-factor authentication on Facebook.

Facebook allows your 2FA number to be used as a search option...

Facebook not respecting privacy, no way!

Trying to set up 2FA on FAcebook is a real ballache without giving them your mobile. They insist on 2 methods of 2FA so you can't just use Authy, there also needs to be a secondary option.

I use a USB key, one of these https://www.amazon.co.uk/dp/B01M1R5LRD , but a lot of people must just opt to give them their details.

I know I know... Doesn't affect me as I've not given my number and I know its fuckbook but just adding it incase someone missed it.

That usb key thing looks cool. Does it work? And can one set up a laptop with it to log in?

I wasn't ripping you, I was bumping the anti Farcebook sentiment with sarcasm.

Wait. I need 2FA to order groceries now?

Internet: you've changed.

Are there any stats on percentage of users in developed nations using password managers to generate and store passwords?

Can one use that key for access to ones password manager?

Thought : weakness to password managers is the front door, ones password for the manager. Use digital key with infinite possibilities.

Dashlane apparently does!
edit: and lastpass Gmail twitter farce book dropbox

Don't think it works for logging in (although some versions do).

This is the basic version, works for 2FA for logging into things like Facebook, Google, etc (mine's mainly for getting into google/email if I can't use authy). I think the plan was for it to expand what it worked with but I don't think it's happened yet.

I think this is what it's compatible with

https://www.yubico.com/products/yubikey-hardware/compare-security-key-series/

There's a "better" version that works with lastpass and others which @Velocio uses which does more

https://www.yubico.com/products/yubikey-hardware/compare-yubikeys/

Mine is a cheap version of the security key.

Yeah, I saw that! Been looking at it.

@Velocio

VB, what's it like? Worth the spend?

FWIW, I use that yubikey with lastpass, and it's fine. Sometimes it takes a minute to install a driver when using it for the first time on a different computer, but otherwise easy and painless. Except when you think you've lost it.
If I was already using one of the supported authenticators I might not bother, but I'm happier not using my phone.

It's worth it. But then... I've got the yubikey neo, yubikey USB c mini, and a Google Titan key now. It's the neo I use the most

I'm looking for any reccomendations for websites/podcasts/whatever about IT security please

https://www.ncsc.gov.uk/