Archives - Two-factor Authentication


Use alternatives to SMS for two-factor authentication

If you use two-factor authentication, it’s best to rely on codes sent to other devices or applications such as Duo or Google Authenticator instead of SMS texts. That’s because SIM hacking is on the rise. This practice entails a cyberattacker tricking a customer service representative into reassigning a phone number to a new SIM card.

Use an Apple Watch to authenticate with a Mac

Apple Watches are increasingly popular accessories for purposes like fitness tracking, but they can also help with cybersecurity. You can unlock a Mac with an Apple Watch that’s powered on and currently on your wrist, as long as you’ve configured it in your Mac’s System Preferences. Doing so has the added benefit of requiring you […]

Change your passwords after a data breach

Strong passwords are among the best defenses against account hacking. Regularly changing them provides additional protection. If you receive a notification about a data breach affecting one of your accounts, that’s a good occasion to update all your passwords and also implement two-factor authentication if possible.

Consider a YubiKey for highly sensitive accounts

If you use two-factor authentication (2FA) to protect your logins, there’s still some risk if the 2FA code is sent via SMS. YubiKey (a hardware authentication device) offers a safer alternative to text messages, in the form of a USB stick that must be physically plugged into your Mac/PC during login. It’s already compatible with […]

An introduction to blockchain and what it means for data security

Many individuals heard about blockchain technology for the first time in 2017. Although it has many possible applications, it is best known as one of the key technologies underpinning cryptocurrencies such as Bitcoin and Ethereum, both of which reached all-time trading highs near the end of 2017. Their price surges fueled speculation about blockchain’s potential […]

Monitor your password recovery email account

If you ever forget a password, you’ll likely reset it by having a link sent to an on-file email address. Make sure that that account is secured with two-factor authentication, doesn’t have any unusual forwarding filters set up and allows for global sign-out in case someone else accesses it.