Privacy & Security Changes You MUST Make (or get left behind)

Рет қаралды 107,090

Күн бұрын

Strong passwords, 2FA and simple "don't click on email links" strategies aren't enough anymore. All the changes in online security and the threats we face require a different approach. Here's what you need to know to win the security game in 2023. Get 20% off DeleteMe using code "ATS" at checkout: www.allthingssecured.com/try/...
▶ Do you live outside the US? Try this version of DeleteMe: international.joindeleteme.com/
Here are links to the other tutorials mentioned in this video:
✅ What is the "One Security Habit"? • The ONE SECURITY HABIT...
✅ How to Use Email Aliases: • STOP Giving Your Real ...
✅ How to use Burner Phone Numbers: • Use a VIRTUAL Phone Nu...
✅ How to use Virtual Addresses: • How to Hide Your Home ...
🔹🔹🔹What You Should Watch Next🔹🔹🔹
We've got a lot of great privacy- and security-related content here on the All Things Secured KZfaq channel (although we admit we're a bit biased). If you're wanting to increase your online cybersecurity, here's what's next:
✅ How to be Invisible Online: • 9 Secrets to Be INVISI...
✅ What's the best 2FA key to use? • How to Choose the BEST...
✅ The BEST Free Security Tools Everyone should use: • FREE Security Tools EV...
🔹🔹🔹Help Support All Things Secured (Recommended Services)🔹🔹🔹
If you enjoy this kind of practical security and privacy content, one of the best ways you can help support this channel is by using these affiliate links to our favorite products and services. When purchasing through these links, you not only get the best available deal, the companies will also pay us a small commission. Thank you for your support!
✅ Recommended Password Manager: www.allthingssecured.com/yt/1...
✅ Recommended Identity Monitoring: www.allthingssecured.com/try/...
✅ Recommended 2FA Security Key: www.allthingssecured.com/yt/y...
✅ Recommended Secure Email: www.allthingssecured.com/try/...
✅ Recommended VPN: www.allthingssecured.com/try/...
*********************
Video Timestamps
*********************
0:00 - Online Security is Changing
1:09 - The BIGGEST Mistake
2:11 - Strong passwords + masked data
3:36 - 2-factor authentication + sandboxing
5:15 - Social media privacy + scrubbing online data
6:20 - I recommend DeleteMe (sponsored message)
7:10 - Phishing protection + family/friends protection
9:01 - Key takeaways
*********************
Hacks, data breaches and compromised privacy are becoming more and more common, so what can you do in the midst of all these changes to win with your online security? Here are four foundational security strategies that most of us already use and the important modifications you need to make.
#cybersecurity #onlinesecurity #onlineprivacy

Пікірлер: 151

@SECYBERSAFE Жыл бұрын

I hope people will understand that nothing is full proof. Good thing a channel like yours exists. We always need to be updated.

@AllThingsSecured Жыл бұрын

Thanks so much.

@maxguod Жыл бұрын

Fool proof -

@schnds Жыл бұрын

Ever since an account of mine was hacked back in mid-2022, I've been making it my best effort to be almost completely unhackable and untraceable online. I'm glad I found your channel among other channels who cover online security/privacy. You guys have helped me a ton!

@AllThingsSecured Жыл бұрын

So glad to hear it, Michael! I hope you don’t have to experience a hack again.

@AndrewMcDreamy 10 ай бұрын

What channels do you recommend for someone starting out?

@ethimself5064 10 ай бұрын

I googled my name and address and only came up with a 411 look up @@AllThingsSecured

@myothurazaw Жыл бұрын

These days we are encouraged to replace physical keys in their own home with passwords or access cards. Now we are told that we should replace passwords for online accounts with physical keys

@ediewall6360 8 ай бұрын

Just found you this very day!!! Lucky me. Thank you for teaching us how to watch our own backs better and making it clear that we need to step up our game to be less vulnerable. I just watched 4 of your videos back -to - back and found MUCH in each one that I need to implement. That is all of this info I think I want to take in at this moment, but I DID share with friends, whom I believe will be grateful too.

@AllThingsSecured Жыл бұрын

Is there anything else you would add to this? I know I'm not covering everything here, so I'd love to hear your comments. And if you'd like to support me while removing your data online, use the code "ATS" when you sign up for DeleteMe: www.allthingssecured.com/try/deleteme-yt

@rjain1993 Жыл бұрын

yes make a video on security question like you made a video on how to set & remember a good passphrase set custom security questions if possible eg. your 1st iphone ? ans. Samsung S3 make it cryptic ($@m5ung S3) that way big tech. , hackers , govt. will keep guessing iphone you can make it harder by setting answer like cake but harder for you too if not letting you set custom then don’t set obvious answers eg. your birth month ? ans. 0ctumbur@ry where did you study ? ans. B3rmud@ Tr!@ngl3 (just examples not my answers)

@rorylisbon4723 Жыл бұрын

Isolate tasks to different browsers.

@darrellm9915 Жыл бұрын

I'm still paranoid about my facebook data getting leaked, even after deleting my account, since they still keep backup copies on their servers forever.

@AllThingsSecured Жыл бұрын

@@rorylisbon4723 Exactly. That's another form of sandboxing that can work.

@theangrychair5150 Жыл бұрын

How much does DeleteMe cost because Im sure its not free?

@MaraudersWorld Жыл бұрын

I have been in IT for over 35 years and my mantra has always been nothing is safe and everything is hackable. I have always "actively encouraged" family and friends to be IT security aware for their own benefit. This presentation is very concise, easy for the layman to understand and covers the more important points everyone needs to be aware of. Well done ... I can now refer to this without sounding like a broken record. 😜

@brooklynnewyorkinsideconst7688 10 ай бұрын

I took a degree in Stockton to secure myself and it’s a bachelor. I also know how to encrypt and decrypt anything. So. I’m so dangerous right now and nobody fights me online anymore even if I curse them

@Mom2MrBabyHaikin 9 күн бұрын

Want to help me? 2FA emergency Social media situation.

@Mom2MrBabyHaikin 9 күн бұрын

Can a physical key still be a solution?

@notyet2345 Жыл бұрын

One of the things I do is put alerts on all my accounts....If someone logs in, i get an alert, if someone changes my personal info, i get an alert......If you don't have alerts setup, do it. Especially login alerts....those will happen even if someone does hack you. If someone logs in to your account, you will be notified immediately. If they change password, you will get alert........it's annoying but it is so worth it. I usually setup email and text alerts.

@krisbright3227 Жыл бұрын

While that is very important, it too also has flaws. Session hijackings, like what happened to Linus Media Group and many other KZfaqrs actually circumvent the Login alerts as the session is considered as "already logged in". Great thing to have, but certainly shouldn't be used on its own.

@voiceofreason5893 Жыл бұрын

Great information. Subscribed.

@user-qr4jf4tv2x Жыл бұрын

the best security is to not have personal information. never stay in a messaging group channel,disable messaging and notification if you can, never make information permanent, 3 months interval of deleting old password, separate email for every social media. never save cookies, have 2fa,sms, don't use password manager learn to type.. sandbox the entire computer or run it over VM.. while VPN/TOR good its better to run your own via cloud provider, take note of sites you registered so you can delete your account

@travelman158 6 ай бұрын

Great Advice! Thank you very much for sharing.

@AllThingsSecured 6 ай бұрын

Glad it was helpful!

@salimbinyussup9351 Жыл бұрын

I salute you so useful & helpful content looking forward your next video thanks Josh 🤩

@AllThingsSecured Жыл бұрын

My pleasure!

@hamadico 11 ай бұрын

I am still convincing my significant other that passwords in notes app is not safe. No luck at password manager yet.

@genericdude6551 4 ай бұрын

Sheesh. The amount of time, money and effort to protect our privacy has us throwing our hands up in frustration.

@barrywilliams991 5 ай бұрын

Set yout email reader to not automatically show pictures embedded in email. If there are senders you trust, set them individually. All of those pictures contain trackers in their URLs and it lets the sender know you have looked at the email. You know those emails that are blank until you dhow the picture attached? Those are sent to fish for active accents and it opens uou up for many different exploits

@y-y-z Жыл бұрын

Awesome video. It's scary in a way to think of the future of personal information theft. My problem is I have numerous email accounts dating back to the inception of America Online. I'm now in the tedious process of deleting them all. Thank you.

@AllThingsSecured Жыл бұрын

Wow…that sounds mind numbing 😆

@specialk9999 Жыл бұрын

That’s what I have been doing or at least trying to do the last couple years. It’s so irritating how so many companies make it such a pain to delete accounts.

@MeticulousTechTV Жыл бұрын

I FINALLY got my spouse to use a password manager… and then 2022 happened. Can you guess which one she used? 😢

@Bushchannel Жыл бұрын

Lastpass?

@T1Oracle 10 ай бұрын

Mines thinks they're too complicated...

@Mackylaw36 9 ай бұрын

Better Nordpass or Bitwarden

@nauxsi Жыл бұрын

The worry about 2fa is getting locked out of accounts because you don't have physical device nearby.

@michaelrobsimonbyrne4068 Жыл бұрын

thanks josh i use my physical key for my accounts

@AllThingsSecured Жыл бұрын

Great job 👏

@garys585 Жыл бұрын

Good info for protecting user access to their accounts. Now if we could get the organizations that house these accounts to protect their databases better against hacks.

@AllThingsSecured Жыл бұрын

Agreed, although I try to give them a slight bit of grace because it’s a constant game of cat and mouse, not to mention trying to keep track of your weakest employee link.

@Pfsensepluss 8 ай бұрын

Consider kevin mitnicks book on being invisible online, good read

@user-to7ni1lv5j 5 ай бұрын

i bought my yubi key over 3 years ago and parked them. After learning about sim swapping, i am bringing them out Do you know how we can use yubi keys to protect wordpress? Thx

@Here4TheHeckOfIt 5 ай бұрын

Ugh. Sometimes, I long for the days when tech wasn't so prevalent. It's tedious having to do all of this. Because nothing is 100% safe, certain things shouldn't be handled online.

@mastergreener Жыл бұрын

Thanks for all of the vids, tips and work. I was wondering if any chance of doing a video comparing the new privacy, decentralised and privacy focused messaging apps like Secretum, Damus etc?

@AllThingsSecured Жыл бұрын

I’ll look into it. Thanks for the suggestion.

@Josh-mo2ib Ай бұрын

What options exist in Canada to 'mask your data' - services you mention for virtual addresses and credit cards don't seem to exist or service Canadians.

@patcostello3882 Жыл бұрын

Hey Josh Have you ever investigated security of third party Keyboard apps? Love your videos too

@AllThingsSecured Жыл бұрын

I generally discourage anybody from using 3rd party keyboards. What’s your purpose for using them?

@smitvirani5791 Жыл бұрын

Make an video no how to secure a physical thing Eg :- like a key 🔑 wallet 🪪 and a piece of paper with password info ! Waiting for this video 😊

@AllThingsSecured Жыл бұрын

So, you mean do a video about having an actual safe in your house?

@houghi3826 5 ай бұрын

I have my own domain. So what I do is make a new alias for each company I have to leave an email addres. It saved me at least once when I received a really good looking fake from my bank, but send to a generic account I use for unimportant things. As the bank does not kn ow that email, it could not have been them. It also is obvious if there is a hack. If I get an email to e.g. my bank email, then I know they are either sold my email (unlikely, as I live in Europe) or they have been compromised. I have 250+ email adresses. Sure sounds like a lot, but I add them one by one and this is something I build over many years. Sure, it is an extra step I need to do when I get to buy from a new company, but it is worth it. It even makes me think "Is it worth the trouble?" and sometimes it is not.

@jobicek 28 күн бұрын

When it comes to things like banking, never ever click on links provided. Unless e.g. you've been expecting an e-mail to verify your e-mail address. In any case, if you do intend to click on a link, check the certificate and domain. If they notify you of something, always go through their main website. This is why banks, at least where I live, don't send links. They don't want people clicking on links in e-mails. They still rely on snail mail for important things. I also have my own domain and have been using vendor-specific addresses for almost 20 years, primarily so that I can track who leaks/ sells my data and to prevent accounts across companies being matched (although since I have a personal domain, it's still possible, but that's unusual). I don't actually set up mail boxes for them, they go into a generic bin that collects all mail that couldn't be delivered to a box. If I wanted to, I would probably create an action that would allow me to make a box for a given recipient and transfer all existing messages there. Creating it retrospectively, when I'm reading mail. Instead of having to set it up during registration. Without having to fill out anything - just a couple of clicks and done. I've always liked to sandbox my interests. That's why I dislike modern social media as opposed to old-school forums. If I'm into model trains and fishing, I don't necessarily want those two groups to know about each other. Usually, only very few people in such groups know who I am. The rest has no reason to and so they don't. Certainly not newcomers. You could set up multiple accounts, but given how nosy social media companies are, they would probably be able to link them anyway. They just have too much leverage.

@Giusie79 Жыл бұрын

Would you save generate and backup codes or just use 2 or more physical keys?

@AllThingsSecured Жыл бұрын

If you save the backup codes securely, it’s pretty much the same.

@fugitive88888 Жыл бұрын

A puece of paper seems to be the way

@mahyelashram5703 Жыл бұрын

My Facebook is locked because 2FA CANT BE ACCESSED PLEASE HELP

@nerkymusselman8843 Жыл бұрын

sorry little off topic here. is the yubikey 5ci the best choice for use for someone on an ipad 80% ($249 standard model) & imac 20% of the time?

@ananamusly Жыл бұрын

Yes but buy multiple keys for backups

@AllThingsSecured Жыл бұрын

In this case, the Security key USB-C would work just as good, and it’s significantly cheaper.

@specialk9999 Жыл бұрын

I’ve been thinking about going back to using a burner phone.

@AllThingsSecured Жыл бұрын

Not hard to do.

@thentil Жыл бұрын

Can add LTT to the list of hacked yt accounts as of this morning 😮

@michaeleichner7522 3 ай бұрын

With the advent of Face ID is there still a need for a Yubikey?

@AllThingsSecured 3 ай бұрын

No, it’s different forms of 2FA.

@raywhuj217 7 ай бұрын

I have multiple e-mail address, burners phone, multiple fake social media accounts, mutiple banks acoount under different names, different passports and and driver's license under different names, multiple home addresses, multiple social number. What else can I do to protect my privacy?

@rexluminus9867 3 ай бұрын

Flipphone.🎉😂😅😊

@ScarfaceLittlebee-mj2ch 17 сағат бұрын

You can hide your identity if you’re on a manhunt 😂

@likebot. Жыл бұрын

I didn't know a phone number is associated with a Twitter account. It's probably required as an added layer of security, but I see it as an added layer of insecurity - giving up personal data.

@AllThingsSecured Жыл бұрын

Exactly.

@likebot. Жыл бұрын

@@AllThingsSecured FYI, I don't have a phone number! :) My wife has a landline tho.

@Mom2MrBabyHaikin 9 күн бұрын

I need your help!!!

@Carolinanine_ Жыл бұрын

I have to use a public wifi when I get to work, the building blocks the cell signal. What are my options??

@AllThingsSecured Жыл бұрын

Yikes. Sounds like you don’t have many options.

@JM.TheComposer 5 ай бұрын

This is one of the few cases where a VPN can actually help you.

@patrikwilliams9639 Жыл бұрын

How do you handle shipments of products to the home?

@AllThingsSecured Жыл бұрын

I’m not a good example. I live overseas, so I send all packages to my virtual address.

@sbconsult Жыл бұрын

Most the Big companies have drop locations you can use rather than your home, i.e. UPS Stores for one. Walgreens will receive FedEx packages, etc. And most have locker locations including Amazon. 😊

@rayn1ful Жыл бұрын

for 2fa why not have a live person call you to give you the security code but have them ask you a security question that only you would know then give you the code once that security question has been answered for even more security? or for 2fa why not do this? when companies want to implement 2fa why dont they use the hardware yubikey that the companies pay for to send to each and every customer?

@sothere1 Жыл бұрын

Same reason companies only offer SMS 2FA. Because every man, woman, other and dog will understand it. They are playing to the dumbest common denominator. Send everyone Yubikeys and 75% of the customers are going to be calling them for help with it every other week.

@label4435 Жыл бұрын

If I have Delete Me, do I need an id theft protection company as well?

@AllThingsSecured Жыл бұрын

two very different services

@rooooooocketeffex Жыл бұрын

You should review Skiff

@AllThingsSecured Жыл бұрын

I will eventually.

@rooooooocketeffex 9 ай бұрын

@@AllThingsSecured aren't you doing paid promotions for Proton?

@grahamsmith2753 Жыл бұрын

The current ransomware attacks due to an old and well-known VPN flaw proves that many companies don't invest enough time in security, and yet they expect us to put our trust in them. Your twitter mention is a case in point. China probably has hackers working 24-7 trying to break into systems worldwide. It's the cases we don't know about that are probably the greatest threat. State-sponsored malware has been around for quite some time, and has always been difficult to detect and defend against.

@AllThingsSecured Жыл бұрын

I agree, but you also need to remember that even when companies invest in security, it’s often no match for the constant state-sponsored attacks.

@grahamsmith2753 Жыл бұрын

@@AllThingsSecured I remember when they discovered Stuxnet in 2010. Who knows how long it been operating. There quickly followed the unmasking of around half a dozen more...all state-sponsored.

@PinkyBooLandBR Жыл бұрын

Do you think it would be a good idea of using a VPN like ExpressVPN but also using Cloudflare DNS server at the same time, instead of the ExpressVPN one?

@AllThingsSecured Жыл бұрын

Absolutely. No harm in doing that at all.

@NKC004 Жыл бұрын

Which is the best free authenticator app?

@AllThingsSecured Жыл бұрын

Google Authenticator is good and I e used Authy in the past.

@SergeiWhobichakokov Жыл бұрын

I'm still using 1Password 6. I didn't want my passwords going to the cloud.

@ediewall6360 8 ай бұрын

I do not want anything ever going to the cloud, ever. I did not ever sign up to cloud associated with my iPad .

@marekmagdziak5916 Жыл бұрын

Thank for this video! My YT was hacked and destroyed :/

@AllThingsSecured Жыл бұрын

I’m sorry to hear that.

@marekmagdziak5916 Жыл бұрын

@@AllThingsSecured Thanks , this and your tips made me smarter now! :)

@marekmagdziak5916 Жыл бұрын

@@AllThingsSecured Have a fantastic day and please keep up a good wwork!

@PinkYellowGreen2023 Жыл бұрын

❤️❤️❤️

@AllThingsSecured Жыл бұрын

Thanks!

@LeighIveta Жыл бұрын

So its turns out Delete me is only available to USA and NOT the UK

@AllThingsSecured Жыл бұрын

Try international.joindeleteme.com

@homer5328 3 ай бұрын

Watched the video, I don’t have computer skills so I went with, I just give up.

@richardharker2775 Жыл бұрын

Instead of massively shielding ourselves to be hiding in a cocoon why is there no measures to seek out the perpetrators? I can follow most of what you say but some is over my head. Hiding your address for instance is impossible if you want home deliveries. Recently my health insurance company had data stolen and now I'm being bombarded with spam. It is impossible to give them fake details and expect a service. It seems to be really and ultimately safe you shouldn't use the internet.

@AllThingsSecured Жыл бұрын

It’s frustrating, I know. Unfortunately, because a lot of the problems come from international attackers beyond your country’s jurisdiction, shielding yourself is one of the only options.

@tiagoreis5390 Жыл бұрын

The only issue I see with a lot of this videos and content is that some services are only available in the US. This leads most of the times to not be able to clean your public data and records anywhere... We all need to start over and gain our online privacy as much as possible... Thanks for this videos and its contents!!!! Some services should start being "worldwide" instead of only US.

@AllThingsSecured Жыл бұрын

Which services are you referring to? DeleteMe offers international service, aliasing is global and virtual addresses are everywhere.

@notknownguy Жыл бұрын

Shall take a look at DeleteMe. But here In the UK hard to get Virtual, Cards, Address and Phone without spending alot.

@tiagoreis5390 Жыл бұрын

@@AllThingsSecured deleteme says on its pricing: "U.S. residents only."... So its not international because only US residents can apply. :)

@tiagoreis5390 Жыл бұрын

@@notknownguy as mentioned: DeleteMe says on its pricing: U.S. residents only. And I am not a US resident... If its global this should be removed. Maybe the service is global but they only allow US residents...

@c1ue1 Жыл бұрын

Fairly sure the "secure" USB is not going to be secure against any form of a moderately skilled attacker. Even discounting a straight hardware clone of the storage - which is incidently really easy on a USB device - I really doubt the software acting as a firewall between USB mounting and a system it is connected to, is attackproof. And if it isn't, an enormous array of options comes into play ranging from cloning the data to enable infinite physical password attempts to a full virtual machine pretending to be the keys of the device. At that point, you would need 50 digit passwords to hold out even for an hour.

@sothere1 Жыл бұрын

What secure USB are you talking about? If you mean the Yubikey shown in the vid, that is not a storage device. It's a dedicated security chip with a USB interface. You're not cloning a Yubikey.

@c1ue1 Жыл бұрын

@@sothere1 The Secure USB in the video is one which has a little keypad controlling the USB controller. It can be attacked easily. Nor is your idea that Yubikey is not "cloning" the least bit realistic. You can't clone a yubikey to another yubikey - but there is no physical way to prevent a straight content rip even though this involves physical access to the underlying memory.

@ScarfaceLittlebee-mj2ch 17 сағат бұрын

@@c1ue1isn’t it encrypted

@c1ue1 7 сағат бұрын

@@ScarfaceLittlebee-mj2ch What does encryption have to do with it? Among other things: if you have penetrated the endpoint that the "secure" device is connected to - either the password is resident in memory or the password is going to have to be reapplied every time the drive is in operation. In either case, the encryption doesn't matter. If the attack is on the device by itself - the boot sector is 512 bytes, typically. If someone has the cash and sufficient desire, it is a pure matter of money to clone the boot sector and then slap it onto thousands of parallel cloud machines to grind passwords. At that point, the question is just how good the password is. But if the "keypad" is not intrinsically tied into said boot sector, you can attack the channel connecting the keypad to said bootsector including snooping, replay, and many other forms of attack. Pretty much every single "secure" device I have ever looked at, at the consumer level, were not the least bit secure.

@TheShubLub Жыл бұрын

I see the value in all of this, but at some point I think that we are becoming a person who spends more time securing themselves instead of actually using the internet. Just like if you have a home, yeah you can put up a 10ft wall, security cameras, a moat. Get more and more secure, but at what point are spending more time securing yourself instead of enjoying the home? Even so, I agree that a lot of this is basic, and should be done. Like minimizing your digital footprint. Scrub you public data, Do 2FA. But multiple email accounts, a front phone number, bothering your friends and family, ect. It becomes a lot. Yeah, if you're a high value target, sure do all you can. But it takes a lot of time and effort. Thoughts?

@AllThingsSecured Жыл бұрын

Yea, I get it. And of all the security/privacy channels I watch, I tend to be the least “fanatical”. This is hardly overboard, I’m simply challenging people to really think about what they need to secure before it’s too late. And I’m not saying that your family needs to do the exact same, but if they’re not using 2FA, just understand that they pose a small threat for you.

@ediewall6360 8 ай бұрын

Oooh I want a moat !!!!

@rjain1993 Жыл бұрын

👍🏻

@AllThingsSecured Жыл бұрын

🙏

@ringoisacandyapple 8 ай бұрын

but I love social sharing 😮‍💨

@barrywilliams991 5 ай бұрын

To make sure you don't get scammed by the fake "I'm in trouble and need money abuse" ask yhe sender a question that they'll easily be anle to answer. Make it a question that is very unlikely to be public knowledge or something on their Facebook or other social media page. If they can't answer it, you are very likely dealing with a scammer.

@Bennyblanco-xx6ki 7 ай бұрын

Srry like KZfaq or somone was blocking me frm making a comment WTH a vpn on!!

@Bennyblanco-xx6ki 7 ай бұрын

Why can’t I leave a comment on youtube

@snipedeedillygaf4973 9 ай бұрын

I am hacked for surely

@fhaupldsk Жыл бұрын

私は、MoreLoginのようなアンチディテクションブラウザやVPNを使用して、自分の真のIPアドレスを隠すようにしています

@mitchellquartero Жыл бұрын

Damn talk about something interesting in 2023

@AllThingsSecured Жыл бұрын

What do you mean?

@mitchellquartero Жыл бұрын

@@AllThingsSecured just my opinion so much going on regarding the recent security incident over the past few months but it very informative to say the least thanks lol