4 ms·

"I’ve been using the same Google account for the last 12 years. And to be honest, I’ve never changed the password and never turned on the 2-Step Verification be

• xfitm3 6y ago
  It's a decision I'm sure the author deeply regrets. The author has another post on their blog promoting security practices[1]. Just going to the settings pane to enable 2FA shows your backup options: backup codes, sms, webauthn, etc. I only remember one password, and that's the password to my password manager. The rest are arbitrary random strings. Always use MFA. I employ efforts to make it difficult for an attacker to port my phone number, too. At this point in the maturity of the internet these measures should be a no brainer, but it's a good reminder of how far we have to go. [1] https://blog.viktomas.com/posts/security-is-like-ogres/ https://blog.viktomas.com/posts/security-is-like-ogres/