# data[].attributes.attachment_link.readable_text
What: Stop kidding yourself that you only re-use passwords on accounts that don't matter, or that you have an unbreakable password scheme that no one else can guess. Every single thing with a password needs to have a unique password, shared with nothing else.

What: Stop kidding yourself that you only re-use passwords on accounts that don't matter, or that you have an unbreakable password scheme that no one else can guess. Every single thing with a password needs to have a unique password, shared with nothing else.

Why: Services get hacked, with entire databases of passwords published in the open. People get "phished", tricked into entering their passwords into shady imitations of the sites they intended to visit. If this happens, you want to limit the damage, ensuring that only one site gets breached.

How: Unless you absolutely categorically have a reason not to ...

2. Use a password manager

What: Software like LastPass (free) or 1Password ($2.99/month or $49), which will store your passwords, generate secure random ones for you, and sync them across multiple devices.

Why: If you can memorise all your passwords, you can almost guarantee that they aren't varied enough to be secure. A password manager may feel like putting all your eggs in one basket, but it's a padded secure basket kept up-to-date by the best minds in the basket business, and what you're doing right now is more like juggling the eggs above your head while blindfolded.

How: Download the password manager, install it on your desktop (you can do mobile later), and start running it. You don't even have to change your passwords all at once: the manager will notice when you log in, and ask you whether you want to save the new password. That should be your cue to create a new one.

3) Use random passwords

What: Once you've got your password manager, use it to generate secure random passwords for you, rather than trying to invent your own.

Why: You aren't as random as you think, and "brute forcing" passwords - systematically trying every variation until you succeed - is getting quicker at the same rate computers are. If you have a handy method for creating passwords, like "take the first letter of every word in a line of poetry", then someone else has probably also realised the same thing, and written a programme to automatically guess those passwords. Try searching Google for " tbontbtitq " (or "to be or not to be, that is the question") if you don't believe me.

How: You've already got your password manager set up, yes? Even if you haven't, some browsers will do it for you. Apple's Safari, for instance, will happily generate random passwords when signing up for new accounts, then store them in iCloud Keychain.

4. Turn on two-step verification everywhere you can

What: Many services, including Facebook, Google, Twitter, Tumblr and more, let you enable two-step verification, also known as two-factor authentication. As well as a password, you need to prove you have access to a second trusted device, normally a phone, to log on. How you prove that varies: sometimes a text is sent, sometimes you use a special app, sometimes you just hit a notification on your phone.

Facebook Twitter Pinterest

2-step-verification-code Photograph: Samuel Gibbs for the Guardian

Why: Two-step verification prevents a third-party from logging in to your accounts even if they have managed to steal your password. It's an added layer of security, which makes it very difficult indeed to hack in to protect accounts.

How: Every service has a different method for enabling the process, which hurts take-up, but handy resource Turn On 2FA will walk you through it for all the sites you use.

5. Update your software

What: Most software has an automatic update function. Use it.

Why: Most hacks are carried out by attacking software using weaknesses that were known, and fixed, long ago. It's like we've invented vaccines, but you're still catching smallpox. Particular focus should be paid to your operating system, web browser, and Adobe Flash.

How: Enable automatic updates.

6. Put a six-digit PIN on your phone and set it to wipe if it's guessed wrongly too many times

Facebook Twitter Pinterest

On an iPhone, open settings, hit Touch ID & Passcode, flick on Erase Data, and click Change Passcode to set it to a six-digit PIN. Photograph: Bloomberg/Bloomberg via Getty Images

What: Your phone has the ability to require a PIN before it is unlocked it. Use it.

Why: If your phone gets taken while it's unlocked, there's not much you can do. But if it's locked when it gets stolen, you can prevent the bad loss of hundreds of pounds of technology from turning into the loss of enough personal data to have your identity stolen too.

How: On an iPhone, open settings, hit Touch ID & Passcode, flick on Erase Data, and click Change Passcode to set it to a six-digit PIN. Almost every Android is different, but look for a "security" menu in the settings app, sometimes under "personal". Then, head to the "lock screen" menu to enable the auto-erase feature.

7. Enable full-disk encryption

What: Your computer's hard drive can be set to automatically encrypt when it's turned off.

Why: You think the risk of identity theft is bad when your phone is stolen, just think what happens when your computer is lifted.

How: On a Mac, enable FileVault; on Windows, turn on BitLocker.

8. Back-up to an external hard drive

What: Everything on your computer should be stored on a physically separate hard drive under your possession. Ideally, everything on your phone should be stored on your computer which should then be etc etc.

Why: If the worst happens, and you lose everything, you need to be able to restore. This could happen because of a ransomware attack, because someone decided to personally ruin your life, or just because of a literal lighting strike. Cloud storage will help, but cloud platforms go bust unexpectedly, are just as vulnerable to hacking, and have an annoying tendency to "mirror" your computer - meaning something deleted from your local storage can be deleted from the cloud at the same time.

How: Buy a cheap USB hard drive. If you use a Mac, just leave it plugged in and enable Time Machine; if you have a Windows PC, plug it in and follow these instructions.

Yahoo hack: 1bn accounts compromised by biggest data breach in history
Topics

# data[].attributes.attachment_link.title
Eight things you need to do right now to protect yourself online

# data[].attributes.attachment_link.description
What: Stop kidding yourself that you only re-use passwords on accounts that don't matter, or that you have an unbreakable password scheme that no one else can guess. Every single thing with a password needs to have a unique password, shared with nothing else.

# data[].attributes.attachment_link.readable_text
The process of protecting yourself on the internet is basically the same as they were a decade ago. At the same time, however, criminals are upping their game, too. This means that not only must you maintain vigilance when online, but also be aware of the tactics that the bad guys use. You surely know the basics of protecting yourself online, but there are also other tactics and tools that you can use to ensure that you are safe.

The Safest Internet Browser Is...

The major browsers are:

Mozilla Firefox

Safari

Google Chrome

Microsoft Internet Explorer (Now "Edge")

Let's look at Internet Explorer. Over the years, there is no question that it has taken a beating. The folks at Microsoft have worked tirelessly to redeem the browser, and it grew much more secure than it was ever been before. But with the last official version being Internet Explorer 11, it's time to move on. There is a lot of debate over which browser is the 'best,' but the truth is, they are almost equal when it comes to reliability, speed, and security.

Internet Explorer, for instance, does a security update whenever Windows Update is done. Firefox offers unique safety features, such as scanning downloads automatically for malware and viruses, as well as offering a virtual keyboard. Google Chrome is very website-friendly, as it tends to have a better display than Firefox.

All of these browsers have security features and options that require the attention of the user, as these might not be enabled by default. For example:

Any pop-up blockers should be turned on

You must decide if you want the browser to remember your passwords. Though this is convenient, it could put you at risk.

You must decide if internet content should be manually or automatically downloaded, and you have to decide where data is stored. Again, this sounds convenient, but it could be a security risk.

Generally, you will have the option to do much of this automatically, but it's best to be notified before the computer downloads anything. This way, you can make a determination as to what affect the download might have on your system.

Wireless or Wired Internet Connection: What's Best?

One simple way to understand the differences in security between a wireless and wired internet connection is to think of a telephone cord. When a telephone is connected to the outlet with a cord, the line is naturally secured. On the flip side, handheld, cordless, and wireless phone conversations are easier to intercept thanks to the influx of scanning tools available. Though a wired telephone can also be tapped, to do so, you must have internal access.

Internet connections are the same. When the computer is directly connected to a modem with a cable or wire, no one can access the connection, unless it's an internal job. However, when you have a wireless connection, it can be hacked from outside, and all of that information being sent can be stolen.

To secure a WiFi connection one must set up WPA versions of encryption and/or use a Virtual Private Network software.

Protecting Yourself From Phishing

Protecting yourself from phishing is easy when you think about it. Simply don't click on any email links from a sender you don't recognize. And always be suspect of emails that look legit. The psychology that goes into phishing emails today is capable of scamming most, if not everyone if you're not paying attention. If you believe that the email is real, hold the cursor over the enclosed link to see the exact URL. If the link is correct for the site you want to visit, it is probably safe. However, it might also be a type of typosquatting, which is when the address is slightly different, i.e. Google.com vs G00gle.com. If you are not sure if the link is safe, contact the person or company who sent the email to ask.

Alternatively, you can type the address directly into the address bar on the browser.

If you get an email alert from a site with an internal messaging system, such as from your financial advisor or bank, log in directly, not through the email link, and check for any new messages. Again, instead of clicking through the email, if you get a message notifying you that your online statement is ready, again, go to the website by typing the address into the bar yourself or use a bookmark.

If an email ends up in your spam folder, this could be a sign that it is a phishing email, even if you believe that it is real. Many email programs and browsers include some type of tool that detects these emails. Stay out of your spam folder.

Remember, legitimate companies will not send you an email asking you for your credit card information or ask you to change your password. If you get these emails, immediately delete them, and then notify the company.

Preventing the 'Zombification' of Your Computer

Both small businesses and consumers have relaxed security practices, and this gives scammers a launching point for their attacks. This allows them to create systems, such as botnets, that allow them to access data without detection. Hackers also use these botnets to send phishing emails, spam, viruses, and malware.

Botnets might be as small as a couple computers or hundreds of thousands of them. In fact, there are millions of computers that have the potential to be part of a botnet. When a computer becomes part of a botnet, they turn into zombies.

There are things that people do that can trigger an attack. These include:

Looking at pornographic websites

Playing games on sites that are hosted out of the country

Downloading pirated software from P2P sites

There is no such thing as honor when talking about thieves, so don't involve yourself in risky behavior online. You will only be opening the door for hackers.

Computers that have unsupported or outdated operating systems, such as Windows XP, also put you at risk for turning your computer into a zombie. The same can happen when using outdated or old browsers, such as IE 7 or 8.

To get the most protection for your computer, make sure that you are setting Windows Update to automatically keep security patches up to date. You should also make sure that you are upgrading to an operating system that is still being updated, such as Windows 7, 8.1. etc. Also, make sure to set antivirus software to automatically update.

Those who have a Mac know that traditionally, they have not been as vulnerable to the same threats that PC owners face. However, the internet has leveled this playing field, and those who choose a Mac are just at risk of online threats as those with a PC. With more people than ever before using the Mac OS, hackers are working hard to create tools to access these, too. Thus, it is very important that Mac users make sure to always run the latest version of the OS and install Security Updates when they are released.

Protecting Yourself From Typosquatting

Typosquatters are those who create websites, such as Tvvitter.com, that looks almost identical to real websites, such as Twitter.com. After these websites have been created, they send out emails to millions, asking them to click on a link...which looks like it is legitimate. The problem? Once the victim is at that site and puts in their username and password, the hacker has their info.

How can you avoid these scams? Try this:

When doing any type of internet search, thoroughly examine each link

When typing an address into the browser, check it to ensure that it is spelled correctly

Only do business with internet retailers that you are familiar with, and then take care to type the address in yourself or use a bookmark.

You might also want to consider using a program, such as McAfee's SiteAdvisor, which identifies any risky website by using a color-coded rating in the search results. This way, when you are browsing, you will know immediately if a site is safe or not.

Protecting Yourself From Scareware and Ransomware

The best way to keep yourself safe from scareware and ransomware is to ensure that your computer is always updated with the newest OS version and antivirus definitions. You should also make sure that you do not click any email links or visiting websites that might be risky. To fully protect your computer, follow these tips:

Use the newest version of your browser. At a minimum, download all available security updates for the browser you have if you don't want to update.

Use the pop-up blocker that comes with your browser. This is usually a default setting, just make sure it's on.

Keep in mind that there are some pop-ups that are legitimate, and if a pop-up will not close, use Ctrl-Alt-Delete to close the browser. If you have a Mac, use Command-Option-Escape, choose the application, and then force it to quit. Alternatively, click the Apple logo at the top left of the screen, and then choose the Force Quit option.

Do not ever click on any links that appear with a pop-up. If pop-ups begin to seem out of control, shut down the computer.

Persistence and patience count here. Though it can be difficult to close a pop-up, keep in mind that the buttons you press within the borders of the pop-up could still force a virus onto your computer.

Make sure that your antivirus software is completely up to date, and set it so that it updates the virus definitions automatically.

Never click any link that suggests that it will update your browser. Only update it from the manufacturer's website.

Most people do not have the time, resources, or even the knowledge to fully protect their identity online. It is also not totally possible to prevent all forms of identity theft or fraud, which is why it is best to be forewarned and forearmed. With the current state of cybercrime growing by leaps and bounds, it is essential that you make an investment into protecting your computer.

# data[].attributes.attachment_link.title
Taking It to Extremes: Why You Have to Protect Yourself Online

# data[].attributes.attachment_link.description
The process of protecting yourself on the internet is basically the same as they were a decade ago. At the same time, however, criminals are upping their game, too. This means that not only must you maintain vigilance when online, but also be aware of the tactics that the bad guys use.

# data[].attributes.headline
Protecting Yourself Online- Second Edition

# data[].attributes.subject
Protecting Yourself Online- Second Edition

# data[].attributes.attachment_link.title
Biggest Online Threats #1: Social Engineering Attacks, and How To Protect Yourself - by bestvpn.com

# data[].attributes.attachment_link.readable_text
I used to be an avid Foursquare user until someone mentioned that the social media platform makes it easy for strangers to know where I am. At the time, I was in college and I always felt safe on campus, but after thinking about my use of Foursquare, I suddenly felt unsafe using it. My mind immediately went to the worst, thinking I was going to be kidnapped.

This experience made me rethink how I use social media, including what I share and who can see my posts. We're going to lay out some guidelines we suggest when using social media so you can be as safe as possible using your online accounts.

How to keep your social media accounts secure

Everyone has their own opinions on what should and shouldn't be posted on social media. While some like to share regular updates about their lives, others like to keep things more private. There is no right or wrong way to use social media, but there is a safe way. Here are 10 things you can do to stay safe on social media.

1. Start with your password

The most important thing you can do to protect your social media accounts is using a complicated, secure password. Even though this gets preached more than anything else, many of us forget to follow this simple rule-including me. Follow these guidelines when creating a password for your social media accounts.

Now, you have to remember that password, which isn't easy since it has 12 characters that include a mix of uppercase, lowercase, symbols, and numbers. Consider getting a password manager to store all your passwords for your various social media accounts. That way, you don't have to remember all the complex passwords you created.

Lastly, change your passwords regularly. We recommend changing all your passwords (including accounts that aren't social media-related) every six months.

2. Skip the personal information

Even though social media sites have spaces for you to enter your home address, phone number, email, etc., that doesn't mean you have to fill them out-and honestly, it's better if you leave them blank. If you need to share private information with someone, do it person-to-person rather than broadcasting it to all of your friends. Does the kid you haven't talked to since kindergarten need to know your home address? Probably not.

3. Check your settings

Make sure your privacy settings are up to date. Whenever a social media app updates, there is a chance that the privacy settings have changed. While you don't have to read through the fine print on every update, you can check for new privacy options and make sure you haven't reverted to previous settings.

Do you want everyone to see what you post? If you only want people you've approved to see what you share, you should set your accounts to private. You can do this with practically every social media account. You can also adjust the privacy settings on individual posts to limit who sees each one.

4. Disable location settings

Disable your location settings so people can't see where you are via your social media channels. You'll notice that Snapchat, Instagram, Facebook, and more give you the option to turn location tacking on or off. Turning this feature off is the safest option so that you don't post your exact location when you update your followers with posts and photos.

5. Share your vacation after you're home

Do not post when you are leaving on vacation. This is one of the most common social media no-nos that nearly everyone does. We want to share the excitement of our vacations, but who's to say that person you friended more than five years ago isn't waiting to break into your house and steal all your belongings? Maybe that's extreme, but announcing your absence does pose a risk. For the sake of your safety, keep from posting updates or photos until you're back from vacation. Then you can tell everyone all about where you visited and what you did.

6. Keep your passwords private

This is a given, but it's worth repeating: don't share your passwords. We know you're only sharing it with people close to you (best friends, significant others, etc.), but you don't know who they may share it with or what they may post. It's better to be safe and keep it to yourself.

7. Examine your photos

Before sharing a photo with your followers, examine it for anything you may not want to share with others, like if you took a selfie and your laptop shows your online banking information in the background. Make sure you're sharing only what you want to share. An unfortunate and highly publicized instance of this risk was when Kim Kardashian West was robbed after displaying her expensive jewelry on social media.

8. Friend your friends only

While you may feel the pressure of having more "friends" on your social media accounts, it may not be the safest way to represent yourself. Accepting friend requests from people you do not know could be dangerous. Unfortunately, not everyone has good intentions, especially online. Adding strangers on social media increases your risk of identity theft, leaked personal information, spam, home intrusion, and other crimes. We suggest only accepting friend requests from people you've met in person.

9. Log out of your accounts

This is even more important when using a public computer. Always be sure to log out of any online accounts. We also recommend logging out on personal computers because you never know when your computer could fall into the wrong hands.

10. Use passcodes

Whenever possible, use a passcode to unlock your internet-enabled device. Most computers, tablets, and smartphones have these capabilities. Take advantage of them because it's one more step hackers have to go through to access your data. We recommend using different passcodes for each of your devices.

Share what you're comfortable sharing

Remember, in the end, it's about what you're comfortable sharing. Everyone uses social media differently, and we want to make sure you know how to recognize and address common social media risks to keep you and your belongings safe.
What social media security tips do you have to share with us?

# data[].attributes.attachment_link.title
Social Media Security: 10 Ways to Protect Yourself Online

# data[].attributes.attachment_link.description
I used to be an avid Foursquare user until someone mentioned that the social media platform makes it easy for strangers to know where I am. At the time, I was in college and I always felt safe on campus, but after thinking about my use of Foursquare, I suddenly felt unsafe using it.

# data[].attributes.attachment_link.title
How To: Protect yourself online in three easy steps

# data[].attributes.attachment_link.readable_text
If You Fall Prey to a Scam, Report It

If you're a victim of online fraud, contact the authorities. You can file an online report with the Internet Crime Complaint Center (IC3)-a partnership between the FBI, the National White Collar Crime Center, and the Bureau of Justice Assistance. Also contact your local police to file a report. The more people who report such crimes, the more criminals are arrested. This is how to protect yourself online, but also know how to protect yourself over the phone. Don't fall for these common phone scams that could steal your money.

Don't Overshare

Don't divulge your birth date, mother's maiden name, pet's name or any other identifying information on social media websites such as Facebook, LinkedIn or Twitter. This is how to protect yourself online in a very simple way: Go look through your profile now and delete any personal information that you find. Also, make sure you never ever post these 7 photos on social media.

Content continues below ad

Content continues below ad

# data[].attributes.attachment_link.title
Here's How to Protect Yourself Online | Reader's Digest

# data[].attributes.attachment_link.description
If you're a victim of online fraud, contact the authorities. You can file an online report with the Internet Crime Complaint Center (IC3)-a partnership between the FBI, the National White Collar Crime Center, and the Bureau of Justice Assistance. Also contact your local police to file a report.

# data[].attributes.attachment_link.readable_text
Here's what we've been told about passwords:

Make them complicated.

Use numbers, question marks and hash marks.

Change them regularly.

Use different passwords for each app and website.

These guidelines often leave users frustrated and struggling to remember them all.

Now the National Institute of Standards and Technology is about to make all of our lives much easier. The organization recently revised its guidelines for creating passwords, and the new advice sharply diverges from previous rules.

"The traditional guidance is actually producing passwords that are easy for bad guys and hard for legitimate users," says Paul Grassi, senior standards and technology adviser at NIST, who led the new revision of guidelines.

The organization suggests keeping passwords simple, long and memorable. Phrases, lowercase letters and typical English words work well, Grassi tells NPR's Audie Cornish. Experts no longer suggest special characters and a mix of lower and uppercase letters. And passwords never need to expire.

"We focus on the cognitive side of this, which is what tools can users use to remember these things?" Grassi says. "So if you can picture it in your head, and no one else could, that's a good password."

While these rules may seem suspiciously easy, Grassi says these guidelines help users create longer passwords that are harder for hackers to break. And he says the computer security industry in both the public and private sectors has received these new rules positively.

"It works because we are creating longer passwords that cryptographically are harder to break than the shorter ones, even with all those special character requirements," Grassi says. "We are really bad at random passwords, so the longer the better."

Previously, security experts recommended the use of password manager apps to ensure users' accounts were protected. Grassi says these apps are useful because they completely randomize the password, but he says they aren't necessary to maintain security.

Grassi stands by these new guidelines because, he says, previous tips for passwords affected users negatively and did not do much to boost security. When users change their passwords every 90 days, they often aren't dramatically changing the password, Grassi says.

"I'm pretty sure you're not changing your entire password; you're shifting one character," he says. "Everyone does that, and the bad guys know that."

# data[].attributes.attachment_link.title
Forget Tough Passwords: New Guidelines Make It Simple

# data[].attributes.attachment_link.description
Here's what we've been told about passwords: Make them complicated. Use numbers, question marks and hash marks. Change them regularly. Use different passwords for each app and website. These guidelines often leave users frustrated and struggling to remember them all. Now the National Institute of Standards and Technology is about to make all of our lives much easier.

# data[].attributes.attachment_link.title
Rapper Who Is Very Concerned With Password Security

# data[].attributes.attachment_link.readable_text
We live in a password-driven world, where between four and 20 characters are the difference makers in whether you're able to access your data, communicate with friends, or make your online purchases. The problem is that passwords should be different everywhere you use them, and that can make it difficult to remember them all. And, if a password is truly strong, that makes it even more difficult. That's why we've put together this helpful password guide. Follow these tips and tricks to take total control of your terms for access.
Common Problems with Passwords
Use Different Passwords Everywhere
Why would you do this when it's so easy to just type "fido" at every password prompt? Here's why: If "fido" gets cracked once, it means the person with that info now has access to all of your online accounts. A study by BitDefender showed that 75 percent of people use their e-mail password for Facebook, as well. If that's also your Amazon or PayPal password and it's discovered, say good-bye to some funds, if not friends.

Remember the Underwear Meme
The saying goes like this: Passwords are like underwear. You should change them often (okay, maybe not every day). Don't share them. Don't leave them out for others to see (no sticky notes!). Oh, and they should be sexy. Wait, sorry, I mean they should be mysterious. In other words, make your password a total mystery to others.

You can make your password sexy if you really want, however. I won't judge.

Avoid Common Passwords
If the word you use can be found in the dictionary, it's not a strong password. If you use numbers or letters in the order they appear on the keyboard ("1234" or "qwerty"), it's not a strong password. If it's the name of your relatives, your kids, or your pet, favorite team, or city of your birth, guess what-it's not a strong password. If it's your birthday, anniversary, date of graduation, even your car license plate number, it's not a strong password. It doesn't matter if you follow this with another number. These are all things hackers would try first. They write programs to check these kinds of passwords first, in fact.

Other terms to avoid: "god," "money," "love," "monkey," "letmein," and for the love of all that's techie, if you use "password" as your password, just sign off the Internet right now.

# data[].attributes.attachment_link.title
Password Protection: How to Create Strong Passwords

# data[].attributes.attachment_link.description
We live in a password-driven world, where between four and 20 characters are the difference makers in whether you're able to access your data, communicate with friends, or make your online purchases. The problem is that passwords should be different everywhere you use them, and that can make it difficult to remember them all.

# data[].attributes.attachment_link.readable_text
The recent news that someone using your computer can see all of your passwords stored in Chrome with a few clicks made me aware of something that I had known -- but ignored -- for a long time: I have five or six passwords for dozens of accounts.

I've heeded the warnings and tried to come up with secure passwords that combine letters, numbers, capital letters and symbols. But often, I'm unable to remember a password and find myself wasting time resetting it.

Enter "password management" tools. These services generate unique passwords for each site that requires one. Your codes are all stored in one central place, which can be unlocked with one master password. (So be sure you don't forget it.)

We compared three password management tools: LastPass, MaskMe and PasswordBox. The services all use AES-256 bit encryption, which Charles Tendell, a Denver-based cyber security consultant and Certified Ethical Hacker, said "would take months to hundreds of years to crack."

So if these services are all safe, what makes them unique? Read on to find out.
LastPass:
LastPass has been around for a bit over five years and is free for desktop use. LastPass Premium, which gives you mobile access, is only $1 per month.

The service works on Chrome, Firefox, Safari, Internet Explorer and Opera. LastPass generates usernames and passwords for you, and automatically fills them in when you visit a site where you've enabled the service.

Like MaskMe and PasswordBox, LastPass has limited functionality on mobile devices. Although it has apps for Android, iOS, Windows Phone and Blackberry, only the Android app can populate login information. Basically, on the other mobile devices, LastPass' mobile app is a place to store, edit and copy your passwords.

PROS: At $1 per month, the premium service is very affordable. The LastPass login has an optional extra level of security with two-factor authentication, which means you can set it up so you have to give the site a secondary form of proof (like a code sent to your mobile phone) to get into your account. It works on most browsers, and has apps for Android, iOS, Blackberry and Windows phones. You can also access your password vault from the web if for some reason you can't download the LastPass extension or don't have access to your phone.

CONS: LastPass has a dated look and feel, and navigating the settings is more complicated than it needs to be. According to the company, LastPass is working on a redesign. And in order to use the Android app, you have to toggle between different keyboards in your device's settings, which is cumbersome.
MaskMe:
MaskMe is a new browser add-on from Abine, the online-privacy startup behind DoNotTrackMe and DeleteMe. MaskMe not only acts as a password vault by generating and storing passwords, but it will also create aliases for your email address that are simply forwarded to your inbox. This is great for two reasons: A password is useless without identifying information, so even if hackers were able to get access to your password, they would have no idea who it belonged to because of the masked email address. While that specific account could theoretically be jeopardized, other accounts with the same password wouldn't. The masked email feature also allows you to easily protect against unwanted mail.

MaskMe's premium version -- which is $5 per month and includes mobile access -- also gives you the ability to create a "masked" phone number and pay for things online without disclosing your actual credit card numbers.

MaskMe's browser extension is for now only available on Chrome and Firefox, but Sarah A. Downey, a privacy analyst at Abine, said the company is working on Safari and Internet Explorer functionality too.

When it comes to password management, MaskMe's Android and iOS apps are limited, and at this stage won't log you into apps. Like LastPass apps for anything other than Android, the MaskMe app basically serves as a secure repository where you can see and copy your login and password.

PROS: The free version masks email addresses, so you never have to give out your actual address ever again. It's very easy to set up and easy to manage your information. Big, clear icons give you access to your login information. It is accessible from the web, so if you're at a computer and can't download a browser extension and you don't have your mobile device, you can still get your passwords.

CONS: Limited login functionality on the mobile (premium) version, which is only available for Android and iOS, but Downey said Abine is working to improve the Android app. At $5, the premium version is more expensive than LastPass and PasswordBox, but you also get much more. There is no two-factor verification, but it's on the way, said Downey.
PasswordBox:
Unlike MaskMe and LastPass, PasswordBox gives free access to its mobile app. It allows you to store 25 passwords -- either generated by the app or your own -- for free. It costs $1 per month to store more than 25.

The PasswordBox extension, available on Chrome, Firefox, Safari and Internet Explorer, has a neat tiled interface that's also pre-loaded with popular sites, so you can quickly add all your passwords to sites like Facebook, Gmail and Twitter.

One thing that differentiates PasswordBox is its most morbid feature -- a "Legacy" function that lets you designate a trusted friend or family member to collect your passwords if you die. The person whom you designate can only have access to your PasswordBox account if he or she presents a death certificate.

PasswordBox also allows you to share passwords with other people who have PasswordBox accounts.

PasswordBox is available on iPhone, Android phones and iPad. But like the other password tools, the mobile app works best with Android. Like LastPass, only the Android version of PasswordBox will enter your stored login info in mobile apps.

PROS: Legacy and sharing features are unique to PasswordBox. The visual layout is simple, clean and appealing, and easily allows you to import your old passwords and login info. (This can also be considered a negative from a security standpoint because you're using your old passwords.) Available with Chrome, Firefox, Safari and IE. At $1 per month, it's a great deal.

CONS: There is no web access to your passwords, so if you can't download and install a browser extension or you don't have mobile access, you can't access your passwords. And like LastPass, you have to toggle between keyboards for the Android app to input your account info. There is no two-factor verification, but a company spokesperson said it's rolling it out this fall.

--

Having a good tool to manage your passwords is only part of the solution, Tendell, the security expert, said. LastPass, MaskMe and PasswordBox are only as good as your master password.

"You can't have a super secure vault with all your passwords stored in it and leave the door open all the time," Tendell said. "You can't have this password vault and have a really weak or easily guessable or non-complex password that you used anywhere else on the Internet."

So what's the best way to choose a truly complex -- but memorable -- password? Tendell said to choose a base word, like "computer," but when you're typing it in, offset each letter in the same direction. For example, "Computer" offset to the key to the above right would be "F0k-8645."
What do you use to avoid password fatigue? Let us know in the comments, or send me an email at passwordtips@huffingtonpost.com.

# data[].attributes.attachment_link.title
3 Tools To Simplify Your Life -- And Protect You From Hackers

# data[].attributes.attachment_link.description
The recent news that someone using your computer can see all of your passwords stored in Chrome with a few clicks made me aware of something that I had known -- but ignored -- for a long time: I have five or six passwords for dozens of accounts.

# data[].attributes.body
PC World Password Protection Tips

# data[].attributes.attachment_link.readable_text
It seems so unfair: Though it's difficult for us honest folk to remember all of the passwords to all of the sites and software we use, losing control of them is a big security issue. Here's some advice to help you avoid two common security problems involving passwords.

Easy-to-Guess Passwords

Why You Should Care: Your passwords are the keys to everything you've locked inside.

Scenario: When someone broke into Alaska Governor Sarah Palin's Yahoo mail account and published details that it contained, the incident drew public attention to a serious problem. You can generate an awesome, complex, random password for your Web mail account, but if the information you provide in the "secret questions" section of your online profile is obvious or easy to obtain, a bad guy won't have too much trouble convincing the Web mail service's password-recovery mechanism to hand over the password on a platter.

These days everyone has a LinkedIn account, a Facebook profile, and a Twitter feed, and these information middens make it all too easy to guess the answers to commonly used security questions such as the high school you attended or the name of your dog. You may have blogged about both of those things half a dozen times or more.

Fix: Use a password manager religiously, and back up your password files. Using Bruce Schneier's Password Safe or the Portableapps.com version of the KeePass software is a good place to start. And once you've created a random, unguessable password, generate a second, different password in the manager to use as the answer to the inevitable "mother's maiden name" question (or questions). Mom may not appreciate being identified in some password bank as Miss 7#BrE_r, but no one will ever guess that that's how you listed her in your "secret questions" data sheet.

Password Protection With Public PCs

Why You Should Care: You may have to use dangerous public PCs in a pinch.

Scenario: While on a business trip, you check your e-mail at the PC in your hotel's lobby. Here's why you shouldn't: It's distressingly common for public PCs in places like schools, cybercafés, trade shows, and libraries to be infected with password-stealing Trojan horses. In many instances these public PCs are not closely monitored by their owners, so they tend to get infected often and to be cleaned of infections infrequently. And since scores of casual visitors use them to log into e-mail or other services, data thieves view these PCs as an efficient source of harvestable information, which they then sell to spammers and other unsavory types.

The Fix: If you can reboot the PC, your safest alternative is to carry a copy of the Knoppix bootable operating system on a CD, DVD, or flash memory drive; you can customize your build with up to 2GB of Internet tools, productivity apps, and utilities. But if you have to use the machine's own Windows installation, you're better off running your applications from a portable drive using the excellent tools available from PortableApps.com. This site hosts dozens of apps that have been "portabilized" so that they store all temporary files, cache files, and history on the portable drive itself.

To protect yourself from malicious software that may be lurking on a public PC, scan the machine with the portable (and free) ClamWin antivirus software, and carry your own customized (and portable) browser, office apps, IM clients, and secure file-transfer tools. There's even a useful password manager tool; after all, PC World's Security Alert blog recommends that you change, as quickly as you can, any password that you've entered while using a public PC.

# data[].attributes.attachment_link.description
It seems so unfair: Though it's difficult for us honest folk to remember all of the passwords to all of the sites and software we use, losing control of them is a big security issue. Here's some advice to help you avoid two common security problems involving passwords.