hello and welcome back to this cyber security awareness course in this video we're going to
talk about some safety measurements regarding your account safety we all have social media
and internet accounts and it is very critical to keep all of them secure the first point i
want to discuss is that using the same password is a wrong attitude let's imagine the scenario
say for example that you've got a twitter account and you are using the same password for this
twitter account on facebook instagram and other applications if your twitter account got hacked
then all of these other accounts will eventually get hacked as well because they all have the
same password so it is a wrong attitude now some people might tell me well if i'm not going to use
the same password for everything then i might end up forgetting all of these passwords that i have
well we have a solution for that you can store your password but in the previous video we've
mentioned that if you store your credentials on text files or doc files hackers can actually view
that and we've demonstrated how they can do that so a solution for that would be using a password
vault so what is a password fault a password vault is basically a software which you can store your
passwords and they would all be fully encrypted and nobody would get access to them except for you
so i've got two examples of password vaults over here the first one is lastpass and the second one
is my key and in the end of this video we're going to demonstrate how they work now the third point
is make sure you change your password every now and then for example if you got hacked and you
have no idea that you got hacked and you change your password then you would be on the safe side
don't use your account to sign up with untrusted websites because these untrusted websites could
end up giving away your credentials or sometimes trying to hack your account
two-factor authorication prevents attempts of brute forcing so what is
two-factor authorization it is basically a way to authorizate log-in attempts to your account
and we've got two types of authentication we've got sms authorication in which the server
of this website sends a code to your phone telling you that this code is used to log
in to your account after you've given away your password and the second one is an authoricator app
and an authenticator app is an app that you install on your phone and it would have a
code in which you can access your account when you try to log in after providing your password
however it is better to use an authoricator app rather than sms authentication because recently
there's been a vulnerability in sms authentication in which we're going to be explaining right now so
for example over here say that we've got a user and this user used authonication to a server
giving away their phone number which is one two three for example now whenever they try to log in
to this server the server would send a message to this user's phone number saying that your code is
abc for example so what hackers do is that they tell the server to redirect the message from 123
to 456 and the server would do so now because of this it is better to use an authoricator app
now an example of an authoricator app is google fondicator the way it works is pretty simple
you just set up two-factor authonication on the website that you want and it would give you a qr
code to scan so you open up google authoricator you scan the qr code and it would send you
to the screen on the right now over here we've got the code in which you're going to be providing
whenever you try to log in and we've got a timer after this timer's up the code would change and
over here we've got the website name so we would tell you for example that we have this
particular code for this particular website say for example that it was facebook now let us see a
demonstration about lastpass and my key all right so we're on this windows environment right now
and we're on the lastpass website now the way you download it is really really simple you just hit
on the button in which you're going to be using this software for example i'm going to be using
this for personal use and it will take you to this page where you can just click on start a trial
this will give you a 30-day trial and it will walk you through the download process and then
it will take you to this extension page over here where you can just install the extension
on your browser whether it was uh google chrome or firefox or even edge and the cool thing about
this is that it works on both ios and android as well so for my key the download process is
easy as well you just click on get started and it will walk you through the download process
but i'm not going to go through that because i already have both of these software installed
now one thing about lastpass is that it is installed as an extension on your browser so the
way to access it is by going to your extensions clicking on it and then clicking on open my vault
and it will take you to your password fold now the way to use it is very very simple you just hit on
the add button over here and you choose what item you're going to be adding a password a secure note
an address payment card or even a bank account you can browse for more items over here like
driver's license passport social security number it is very very awesome to have such a software
now for example select password it's going to tell you to enter a url for example i'm going to
be storing a password for paypal and then we can just choose a folder for example paypal passwords
and a username for example test and the site's password the password that you use to access
paypal for example we can just type some password over here and right here we can see that it tells
us the strength of this password so if we were to put a complicated password take a look at this
it would tell you that you've chosen a very very good password now over here we can add some notes
and if we just hit on this advanced settings option we can require the master password which is
the password that you used to sign up with lastpass and we can just hit the auto login button
or disable the autofill button these options are not really important not as much as these
options so we can just hit on save over here and as we can see we've got our paypal password
saved so if we were to hit on launch it would actually take us to paypal login and it would
allow us to put the password without having to enter that now this is really really useful
when it comes to something called key logging what hackers do is that they use a keylogger to
know what buttons you're pushing on your keyboard so if we are using this option on lastpass
to auto put the password on the website it would be very very good because for example if you
are hacked if you have a malware on your device hackers won't be able to know what you're typing
because it just auto put the password and you didn't have to type it in
now if we were to look at my key over here the process is the same you just click on add password
you put every single detail about your password your nickname for example the username the
password the website that you're going to be using this password on and you choose your profile over
here i've set it to personal you can just add some tags over here but that's not really important so
the process is really really easy let's go ahead and take a look at what we can do so we can just
for example type a nickname over here a username a password say i want this to be on facebook.com
and then we might as well just click on save over here and it would save my password and
it would tell you that this password is used for facebook.com and as we can see over here we've got
this facebook banner over here now the cool thing about my key is that it enables an extension on
your browser as well so if we just go to your browser store and search for my key you'll be
able to find it and it's not really different from the desktop application because it has
all the options over here as we can see we've got the payment cards secure notes identities and all
the options that were in the application and we can see over here that we've got the password that
we created so using the extension we can just go ahead and launch facebook the same way that we did
with lastpass and we can just click on this and it would just autofill
the credentials but since these are fake credentials facebook is not going to open
up now this is it for this video i hope that you liked it and i'll see you in the next video