article thumbnail

No, Spotify Wasn't Hacked

Troy Hunt

Instead, they need to look inwardly and adjust their own security practices instead. Get a password manager (8 years on and I still use 1Password every day), create strong and unique passwords on every account and enable 2-factor authentication where available.

Hacking 224
article thumbnail

GUEST ESSAY: Until we eliminate passwords, follow these 4 sure steps to password hygiene

The Last Watchdog

Silo your risk by generating a unique password for each of your online accounts. Two-factor authentication may seem technically complicated, but “2FA” is a security measure you already know. Anytime a website sends you an SMS code or asks a personal security question, that’s a form of 2FA.

Passwords 228
article thumbnail

The 773 Million Record "Collection #1" Data Breach

Troy Hunt

The same anonymity model is used (neither 1Password nor HIBP ever see your actual password) and it enables bulk checking all in one go. Get a Password Manager You have too many passwords to remember, you know they're not meant to be predictable and you also know they're not meant to be reused across different services.