DON'T USE GMAIL unless you make these 5 Critical Security Changes

Рет қаралды 822,295

Күн бұрын

Gmail security isn't hard, but it does require you to take ACTION! Walk step-by-step through these 5 Gmail security tips to learn how. And make sure you grab your discounted Yubikey: geni.us/yubico-store
Links mentioned:
▶ Gmail Security Settings: myaccount.google.com/security
▶ Gmail Security Checkup: myaccount.google.com/security...
▶ Google's Advanced Protection Program: landing.google.com/advancedpr...
▶ My recommended 2FA Key: geni.us/yubico-store
If you care about your personal security and privacy online, download my free security checklist here:
✅ Security Checklist: www.allthingssecured.com/secu...
🔹🔹🔹What You Should Watch Next🔹🔹🔹
We've got a lot of great privacy- and security-related content here on the All Things Secured KZfaq channel (although we admit we're a bit biased). If you're wanting to increase your online cybersecurity, here's what's next:
✅ Learn how to Setup your Yubikey 2FA Key: • Setup a 2FA Key for MA...
✅ The 3 Levels of Password Security! • 3 CRUCIAL Levels of Pa...
✅ How to be INVISIBLE Online: • 9 Secrets to Be INVISI...
🔹🔹🔹Help Support All Things Secured (Recommended Services)🔹🔹🔹
If you enjoy this kind of practical security and privacy content, one of the best ways you can help support this channel is by using these affiliate links to our favorite products and services. When purchasing through these links, you not only get the best available deal, the companies will also pay us a small commission. Thank you for your support!
✅ Recommended 2FA Security Key: geni.us/yubico-store
✅ Recommended Password Manager: www.allthingssecured.com/yt/1...
✅ Recommended Identity Monitoring: www.allthingssecured.com/try/...
✅ Recommended Secure Email: www.allthingssecured.com/try/...
✅ Recommended VPN: www.allthingssecured.com/try/...
*********************
Video Timestamps
*********************
0:00 - Why is Gmail Security Important?
1:05 - Create a Stronger Password
1:42 - Check Trusted Devices in Gmail
2:32 - Turn on 2-Factor Authentication with Yubikey
4:34 - How to Setup a 2FA Key in Gmail
5:40 - Review 3rd Party App Access (and remove)
6:17 - Enroll in Google's Advanced Protection Program
*********************
The best kind of Gmail security comes when you have a strong password, 2FA security and have checked all trusted devices and 3rd party permissions. These are very easy things to do and here is a quick and easy tutorial that will show you exactly how it is done.
Get your Yubico 2FA key here: geni.us/yubico-store
#gmailsecurity #gmail #yubikey @Yubico

Пікірлер: 454

@acts9531 Жыл бұрын

I was already doing all this but it never hurts to revisit things just to stay current on security. Great video -- short, concise, clear and good visual examples provided. No fluff, no crap, just solid information that everyone should know. Just one thing ... follow Matthew Kutoloski's advice on your mic. Some people watch YT videos on their phones, some of us use much more complicated equipment. I'm one of the latter.

@matt_nyc_audioengineer Жыл бұрын

Hey bud great video, thank you for the tips. I'll give you a tip in return. The mic you are using is meant to have the audio come in the front, not the top. So you would want to flip the mic up and speak into the front of the mic. Just make sure you are speaking into the front and not the back. Your audio will improve GREATLY if you do that. I'm a professional audio engineer so recording and mixing is my profession! Anyway, just a friendly tip. Thanks again for the video!

@McMillanScottish Жыл бұрын

You forgot to mention the pop screen. I thought my windows were gonna fall out.

@matt_nyc_audioengineer Жыл бұрын

@@McMillanScottish 🤣 Yes, a pop filter would certainly help too. The plosives were pretty bad in some spots.

@tnekkralc8080 Жыл бұрын

Just to point out. I had zero issues with the audio in this video. Found absolutely no issue hearing/understanding everything he said. I think tips are fine. Just wanted to point out the quality was great 👍

@matt_nyc_audioengineer Жыл бұрын

@@tnekkralc8080 Noone is saying it wasn't. The audio quality is not great. Maybe to you, it sounds ok. There is nothing wrong with the audio the way it is tho. Never said there was. Did you even read the comment? I didn't criticize the man! I gave him a professional sound tip just like he is giving up professional tips. I was returning the favor. No one said anything like that. 🤦🏻‍♂

@tnekkralc8080 Жыл бұрын

@@matt_nyc_audioengineer Okay. Thanks. You (and the other guy) heard things that I didn't hear. Not sure if you had your volume on blast or what. LoL. Great tips. Just try not to get offended when others leave feedback, TOO. LoL

@moosedancer1 Жыл бұрын

I recently found you channel and glad that I have. You have the ability to make sense from a basic user to an advance user.

@TheYogina 2 жыл бұрын

I like your security advice. In fact I think you're one of the best guys on here. You give practical advise with out going over the top.

@nevigo5519 6 ай бұрын

I have tried it too. To be locked out is a PITA. So now I use a strong PW and 2FA. It's essential with a Google account. Thanks.

@alicias2915 Жыл бұрын

Thank you very much for all this very helpful , informative and great information.Your amazing. Thank you.

@theguidinglight7218 Жыл бұрын

i've recently been attacked by who knows who in the online world, and have been getting emails about suspicious people trying to sign in, or successfully signing into my accounts. i've had to outright shut down two accounts on different websites, and am going full blown max security on everything. its been annoying to deal with this new security stuff, but i feel safer and less vulnerable.

@DireNeeds 2 жыл бұрын

Thank You. I have made my way to my account's security page in the past. The video was a good reminder to do so again.

@TheSeeking2know 2 жыл бұрын

A good first step.

@AllThingsSecured 2 жыл бұрын

Great! Glad it was helpful.

@JamesEmirzianWaldementer 2 жыл бұрын

Thank you for listening about the scammers

@AllThingsSecured 2 жыл бұрын

Thanks for watching and commenting.

@1918 2 жыл бұрын

hey! really good and educational video! incredibly useful for anyone. one crucial thing though; don't use your mobile phone number for 2FA or as a recovery method in general! whatever you do, don't do it! don't use your phone number as a recovery method anywhere on any platform at all! it allows for "sim-swapping" attacks to take place and be used to gain access to everything you use your phone number for. keep this in mind wherever you sign up! you should make a video about this and "sim-swapping" in general. ❤️

@RayMondElec 10 ай бұрын

So want you are saying is use another sim. Which is only used for 2fa and nothing else?

@MakeAstand5 10 ай бұрын

@@RayMondElecNo. NEVER use sms as a two factor authentication option

@liteknight 8 ай бұрын

@@RayMondElecno because that Sim can still be Sim swapped.

@sort407 7 ай бұрын

I am dealing with this now.

@user-dt7yt1bs1v 6 ай бұрын

I'm sorry I don't see the link for the 2fa keys?

@johnmoreno4212 11 ай бұрын

Thanks a million for this info!! ❤❤❤

@teresaweaver6609 5 ай бұрын

Extremely good information thank you so very much for sharing❤

@AllThingsSecured 5 ай бұрын

You are so welcome

@dr.maazasif5424 8 ай бұрын

Very informative and helpful video. Thank you. 👍

@LK-bz9sk Жыл бұрын

Really succinct and helpful information. Thanks so much.

@AllThingsSecured Жыл бұрын

Glad it was helpful!

@BillyPilgrim-ds9cv 10 ай бұрын

Really helpful and well explained - thanks

@TNKHART 2 жыл бұрын

Thank you Josh for all your content. It's made me see much of what I need to better protect including my Gmail. Much appreciated.

@AllThingsSecured 2 жыл бұрын

My pleasure, Tim! Thanks for watching and commenting.

@Guillie641 2 жыл бұрын

Change your GOVERMENT NAME TO A BOGUES AND FOR IMPORTANT ISSUES USE 10MIN EMAIL

@Jaymac0929 2 жыл бұрын

Great Information i will check this out Thank You.

@AllThingsSecured 2 жыл бұрын

Glad it was helpful, Jay.

@funfunnyoutube Жыл бұрын

Thank you... Sir.... Love you❤❤

@glenbarrington2634 Жыл бұрын

Thanks! I've been thinking about a 2FA physical key, and this has solidified my intent! Quick question, can one buy a fancy fingerprint 2Fa key as primary device and then use a cheaper device with fewer features as a backup? Also, must the 2 devices be from the same mfgr?

@MikeWyattmodel48 9 ай бұрын

Thanks very clear and precise

@AllThingsSecured 9 ай бұрын

Glad it was helpful!

@brendamartinezgomez2297 11 ай бұрын

Thank you .

@Coffin.spirit Жыл бұрын

Thankyou so much brother my account is safe cause of you 👑

@ikust007 2 жыл бұрын

I sincerely love your channel

@AllThingsSecured 2 жыл бұрын

Thanks so much!

@Anthony-pw5gu 2 жыл бұрын

T thank you for this video very helpful 👍

@wordupup7155 2 жыл бұрын

That Voice

@erobos111 2 жыл бұрын

I Always appreciate the easy to follow format & encouraging tone of your demeanor🙏🏾 If you were my teacher when I went to IT school, l would've actually learned something and had a career instead of getting jerked around for over 2ys!🤷🏾‍♂️🤦🏾‍♂️ The school wanted my program's money much more than they wanted to teach me😒🤑

@AllThingsSecured 2 жыл бұрын

Thanks for the kind words!

@britneyherrera81 Жыл бұрын

I concur with this comment 🙃

@ShadaeprincessCleanLikeABoss 11 ай бұрын

@@AllThingsSecured is the spring merch shopping for youtube having access to google account safe? Having 3rd party access

@rightpassage 3 ай бұрын

Fantastic!! A 2FA key is what I need. I was thinking that today. I forgot my password to my Nordpass. What a headache. Still waiting for them to contact me. Good thing I have biometrics on the phone. I've been wishing I had one on my laptop.😁

@corettagreene1707 Жыл бұрын

Thank you so much ❤

@AllThingsSecured Жыл бұрын

You're welcome 😊

@Whalebarf79 Ай бұрын

Fudge. All new new info for me. Thanks for the info.

@dorkusmaximus3033 4 ай бұрын

Thanks!

@AllThingsSecured 4 ай бұрын

Thanks for the support!!

@user-co7kv2de9e Жыл бұрын

very useful video

@wingandhog 2 жыл бұрын

Good suggestions. I have been wanting to grab a two-pack of Yubi’s and will use the discount. I also subbed

@AllThingsSecured 2 жыл бұрын

Great! Glad to hear it 👍🏻

@abdaleali609 Жыл бұрын

Appreciate for ur hard working, can you plz tell me if it's risk to use enhanced safe browsing for my security chrome.

@pedroblanco8311 Жыл бұрын

Hi Josh, I'm considering the final step in your helpful video. Do you know how many keys I can program for the Google Advanced Security Plan? When I went to sign up, it seemed to default to two, however I have more. Thanks for advising.

@mitchellquartero 2 жыл бұрын

Thanks I use two factor on all my accounts and I constantly changing security updates every 5-6 months and I use a password manager

@patrykmaterla4808 2 жыл бұрын

Great video, make next one about outlook emails security improvements please :)

@AllThingsSecured 2 жыл бұрын

Thanks for the suggestion!

@matheusgoncalves6246 Жыл бұрын

Excellent and straightforward video!

@AllThingsSecured Жыл бұрын

I appreciate it, Matheus!

@MarcoFlores-um7cj 2 жыл бұрын

I really like how you explain your topics, other youtubers tend to be paranoid

@AllThingsSecured 2 жыл бұрын

Really appreciate that, Marco. I hope you stick around.

@Ken_829 3 ай бұрын

Thank you

@AllThingsSecured 3 ай бұрын

You're welcome

@rampart6925 2 жыл бұрын

Big thanks, big hug!

@rvvanlife7077 Жыл бұрын

thanks

@pbilk 2 жыл бұрын

A good video. Too many people have insecure Gmail accounts. I personally don't use Gmail. I was forced to use one for KZfaq way back to comment on KZfaq but if I could remove the connection to my hotmail account I would.

@koreyb Жыл бұрын

I'm curious. How is hotmail more secure?

@luisibanez3180 6 ай бұрын

@@koreybI mean it’s technically a Microsoft account so it shouldn’t be worse nor good.

@Waltaere 8 ай бұрын

Lols i already watched so much of your videos that i decideds to just subscribes 🤪

@malikmps 11 ай бұрын

great service video. Do these keys work with Thunderbird? It is my preferred email client.

@ringstaffclaudine45 3 ай бұрын

Yes they got my information and using it

@justchilling5448 Ай бұрын

I don’t trust Google with my privacy, and definitely not with my emails. I have one anonymous Google account just for my KZfaq, and a totally different anonymous account for Google maps, that’s it. Great channel by the way 👍🏼

@blueplanet36 3 ай бұрын

Good PROGRAMME sir

@oggioggi3295 2 жыл бұрын

Excellent video my account is now as secure as it can be big thanks

@AllThingsSecured 2 жыл бұрын

Glad you enjoyed it!

@tedchan7471 3 ай бұрын

thx

@kennethng8346 Жыл бұрын

Can you talk about the yubikey primary and backup? Is it just two yubikeys set up independently or do. you do something to copy the contents of the primary onto the backup? I like the idea of yubikey but am afraid of losing it.

@Charles_Carpenter Жыл бұрын

Awesome vid! I was going to buy the Yubikeys but the coupon is no longer valid 😞

@jorgehenao3900 Жыл бұрын

hi from cali colombia nice video ..can you give your opinion about k9 k16 etc feitian keys ..thanks

@justmeunm8 Жыл бұрын

Hello all things thank you for this information because I get hacked all the time which one of the 2FA Do you recommend on Amazon thank you in advance

@tusshaarpatil 8 ай бұрын

Your content is simply amazing. I would just want to ask you that is there any contacts app or something like that where we can sync and store our contacts on any cloud or something as currently we save our contacts on google which immediately syncs it to all devices. This would be a great work around to de-google ourselves.

@AllThingsSecured 8 ай бұрын

You can do that with Proton. They offer a great suite of services to replace Google, including both email and contacts (which sync between devices).

@emcsquare62 2 жыл бұрын

Just ordered my YubiKey 5 for my Google 2AF

@AllThingsSecured 2 жыл бұрын

Awesome! Glad to hear it Erick.

@Psartz 2 ай бұрын

Today randomly clicked on locate my device.when opened realized there three other phones and tablets which I never owned...

@frugalliving73 Жыл бұрын

Hi, question I sometimes find clients emails placed in filters or spam even I didn't check the spam box. Somehow they just land there. Super annoying. I also use a crm so maybe that's what's sending stuff there? I'm thinking of switching to Proton mail but I use surfshark so not sure if it's compatible.

@sugarpuddin Жыл бұрын

2FA is vulnerable and this method give information to Google regarding your other devices; which it will now tie into its analysis of who and where you are, where you go, who you know, and all other issues Google should not be monitoring

@sweetslasherwalks Жыл бұрын

Hey there..thanks for the vid. Just want to ask how can I cancel my storage. I couldn't access my account anymore. Even phone verifications and alternate emails dont work. I don't want google to kwep on charging me. Thanks so much.

@jaeminkim7406 7 ай бұрын

Brother once I put yubi... All bad email stop.. wow good

@cryptosig283 2 жыл бұрын

What do you do about wear and tear on the yubikey? If I kept it on my key chain, I’d image a year later it would fall apart or be gross. You should make a video on tips for transporting your yubikey on the go.

@AllThingsSecured 2 жыл бұрын

Interesting idea! I've had mine on my keychain for a couple years now and haven't had any problems. But again, I think that speaks to the importance of having a backup that ISN'T kept in your pocket and scratched up all the time :)

@stevenhespelt7951 2 ай бұрын

I was concerned about the same issue - I use a "Cozy" USB-A cap > both it & the Yubikey are attached to the same small metal ring and the Cozy is flexible, fits snug on the male USB-A tab. So far, works great.

@ibstayfly 5 ай бұрын

Thank you very informative. I already have 2 step verification enabled and a strong password so I'm good right. Can I still get hacked with that. And how do you know if your account is hacked And even though I have 2 step verification on I don't receive codes when logging in. I should right. I also have backup codes

@jamesbrown8766 2 жыл бұрын

Great information! I understand that these measures help secure my data from 3rd party access, but my only question is, do these steps prevent Google from accessing or using my information? I doubt it, yet they are arguably one of the most egregious offenders of data privacy.

@AllThingsSecured 2 жыл бұрын

No, Google still stores your data on their servers, even with 2FA. That's a separate issue altogether.

@michaelprzewrocki4195 11 ай бұрын

he can smile!

@latitamontoya 3 ай бұрын

thanks for the info could you tell me what is the difference between 2FA key and USB-C

@AllThingsSecured 3 ай бұрын

Two different things. A 2FA key can be USB-A, USB-C or even Lightning (iPhone). It’s just the type of connection.

@geraldlandis8818 3 ай бұрын

what you say is slick for an old man like myself. how do I know what you say is legitimate and you are not selling a service which will go away

@geraldlandis8818 3 ай бұрын

We all have seen apps come and go away

@TheYeowyap Жыл бұрын

Seems like Google prompt will be alwasy the default even if you enable 2FA with authenticator app. Any workaround?

@mitchellquartero 2 жыл бұрын

I’m considering getting a security key as a backup

@Kenleaty Жыл бұрын

What's the best security anti software / mal ware for Android. Thanks. Also why yubikey over Google key

@blueplanet36 4 ай бұрын

We try sir

@EnchiladaBoredom 12 күн бұрын

Yeah but my mom was Grace just 4 more houses away! Im going to eonder if you knew that before I did because I'm new to this. Do you try to make a courtesy call to fix what you did wrong where driving Japan into it?

@muthukrishnan3045 2 жыл бұрын

Thank you josh You sent this video on gmail 😅

@AllThingsSecured 2 жыл бұрын

My pleasure, Muthu.

@muthukrishnan3045 2 жыл бұрын

@@AllThingsSecured 🥰

@mrpickles-hb6zx 9 ай бұрын

I need this because my parents are childish and "never wrong"

@markstevens1729 Жыл бұрын

Hey, a YubiKey ad disguised as a security video. Very thinly disguised. Holy crap!

@LAHarder7 Жыл бұрын

Yeah, and now that I watched it I'm getting dozens more suggested videos about how we're all gonna get hacked unless we use Yubikeys. Yubikey affiliate channels must be the latest money-making scheme.

@markstevens1729 Жыл бұрын

@@LAHarder7 me too. The price of living by the algorithm.

@turtle.trek.2023 Жыл бұрын

All they have to do is use the built-in security on the phone itself. Like the fingerprint reader.

@ScoobySnax. 2 жыл бұрын

I got hacked yesterday and miracuolously got my account back and I'm making sure it doesn't happen again.

@timobrien842 Жыл бұрын

Is Yubico Yubikey the same brand, and how durable are these? Does a little dirt or dropping them on counter cause any issues?

@AllThingsSecured Жыл бұрын

Same brand and absolutely durable.

@r.mercado9737 Ай бұрын

Thank you. Question. How secure is the Norton VPN? How protected is my computer? Can anyone hack into my computer using the NORTON VPN?

@dj8010 Жыл бұрын

I just purchased 2 new USB-C/NFC Titan security keys. Do you have a video showing recommended setup using these keys?

@AllThingsSecured Жыл бұрын

Here’s what I’ve done: kzfaq.info/get/bejne/nOCFidWrlc_cnmw.html

@dj8010 Жыл бұрын

@@AllThingsSecured looking for a specific video on the Google Titan keys.

@lockbert99 4 ай бұрын

1/21/2024 It looked like Google does not offer 2FA via an authenticator app as it only showed [text message, security key, other device prompt] as choices, but after setting "other device prompt" it let me do text message as a secondary backup and then gave authenticator app (they wanted it to be their own but Authy worked) as another secondary verification. Don't know why they don't give it as one of the initial choices.

@jessicasmith4388 Жыл бұрын

Josh, My partner lives on her iphone and she refuses to use a password manager or any 2FA her reason is she doesn't want to complicate her life. Is there anything that can protect her phone but yet be simple. I believe she feels that there is no need for all this protection as it just complicates your life. She has access to one of my accounts and I had to change the password to something simple so she could remember it. Thanks for your help Jessica

@maxguod Жыл бұрын

Apparently Josh does not talk to lesbians -

@bryansproles2879 2 жыл бұрын

After losing access to my gmail account in 2018, I knew I had to move to 2FA. I tried sending a physical letter to Google telling them what happened (and that the automated system refused to recognize me for some reason), but never received a reply from them. I lost 13 YEARS worth of email, and unfortunately, a link to someone close to me. (This also made me realize I need a minimum of TWO ways to contact people I care about, and not just via email.) Tough way to be forced into using 2FA, but now it seems every service is using it anyway.

@madcowusa4277 Жыл бұрын

Never trust these bastards. Never. And never follow their security advice. Ditch them and move on as they've already screwed you once.

@audreyboag7670 Ай бұрын

Lots of XYZ-ers here helped by this because they already posess the required degree of proficiency. All greek to me, and will be to most elders. Probably time to unplug. Sorry to be cranky but completely overwhelmed by flying images, galloping speech, and internet jargon. Slowing it way down helped a little. On the bright side...thank you for no background music.😘

@Jalan_Ilmu5 2 жыл бұрын

For proton mail. Theres change about their privacy and policy. What do you think about it ?

@AllThingsSecured 2 жыл бұрын

I'm still using them because of the zero-knowledge structure of the data, but as with all things, it's a personal decision.

@Griffin_Drowner 10 ай бұрын

i can confirm that it takes a shit ton of annoyance to get your account back

@Griffin_Drowner 10 ай бұрын

i got my facebook account fully locked out from me by the person who stole it and my youtube and insta were banned bc of the person and i have 2 strikes for videos i never posted my self and my insta is perm banned so secure your accounts guys

@johnseddon7793 6 ай бұрын

What about facial recognition? Thank you.🙏

@leeniesevy-perahia7911 3 ай бұрын

This is 2 years old….perhaps update it.

@arnimkrause5696 2 жыл бұрын

Using a 2FA key gives google more info about you your finger print. Just what I want to do is give google more info about me? Not happening!

@ericphantri96734 Жыл бұрын

It is not about money but about social networking and access

@mytempemailmte8128 9 ай бұрын

Good video, except for the fact that if you setup a 2FA and ask Google to send a text to your registered phone # and that you happen to be traveling abroad, then you're screwed since you won't be able to access your email till you verify your account and b/c you'll be overseas yo won't be able to get that txt msg!

@AllThingsSecured 9 ай бұрын

Another great reason to use a 2FA key that you can bring with you.

@AmusedDna-il4qu 4 ай бұрын

Dont have laptop, only phone

@cyndirivera4249 Жыл бұрын

I did all of this I think they have access thru my internet as well

@ikust007 2 жыл бұрын

Mate : show us how to use Yubico keys to generate passwords please . Also how do we make a backup of the keys? I think you made a video about it …?

@AllThingsSecured 2 жыл бұрын

You can see my full setup video here: kzfaq.info/get/bejne/nOCFidWrlc_cnmw.html As for backups, and I think I reference this in the video linked above, I recommend setting up your backup key at the same time you setup your primary, and then putting that backup key in a different, secure location.

@ikust007 2 жыл бұрын

@@AllThingsSecured cheers !!

@dalem7504 2 жыл бұрын

Can you leave the Yubico 2FA key in a PC USB port 24/7, or do you only insert it when signing in to a supported website, then you have to remove it from the port?

@AllThingsSecured 2 жыл бұрын

You could leave it in if you wanted to, and Yubico sells a key that works well like that. For security purposes, a 2FA key isn’t supposed to be kept in the PC at all times. It’s supposed to be removed every time.

@etiennededurocher Жыл бұрын

Hi Josh. Little question here. If I have simultaneously a Yubikey and a second way to get in my accounts that is NOT a second physical key (so a second 2fa by texto, app, backup codes etc...), does the second way completly defeats the purpose of having a key? you mentionned having 2 ways to get in so you dont get lockedout, and then talk about getting backup codes stored somewhere, but arent those backup codes as "unsecure" as 2fa by text for example? thanks mate.

@SecurityHawk12 Жыл бұрын

Apparently, Josh doesn't reply to comments....unless you praise him.

@fasteddie9890 Жыл бұрын

I have the same question - and I liked and subscribed. It sounds like that if you enroll in the Google Advanced Protection Program that you *must* use the YubiKey (or other physical key), which seems like it eliminates the other ways to access the account. Josh, is that correct? If so and one doesn't want to enroll in GAPP, would it make sense to remove one or more of those alternative backups? I'm thinking that makes sense - to delete the SMS and maybe even authenticator app options, and then keep the backup codes in a safe place.

@Charley_Buehner 11 ай бұрын

Step one - pick an impossible-to-remember password that you won't forget... Different from all the other impossible-to-remember passwords. And don't trust the browser's "remember me" prompt - because they DON'T...