Password encryption is essential to store user credentials stored in a database securely. Without password encryption, anyone accessing a user database on a company's servers (including hackers) could easily view any stored passwords.
Even a strong 32-character password created using a <a href="https://teampassword.com/password-generator">secure password generator</a> is useless without password-encryption! If someone can read your password on a server, they can use it simply by copy/pasting it&mdash;no matter how long or complicated the password might be!
Encryption scrambles your password before saving it on the server. So, if someone hacks the server, instead of finding password123, they find a random series of letters and numbers.
In this article, we're going to explore the world of password encryption, why <a href="https://teampassword.com/blog/tips-and-tricks-to-create-a-strong-password">strong passwords matter</a>, and how you can practice better password management!
&rlm;&rlm;&lrm; &lrm;
<a href="https://app.teampassword.com/dashboard#signup/testimonial">TeamPassword</a> is the password management solution for small businesses! Create, store, and share login credentials safely with employees, contractors, and clients. <a href="https://app.teampassword.com/dashboard#signup/testimonial">Sign up for a 14-day free trial</a> today!
&rlm;&rlm;&lrm; &lrm;
<h2>Understanding Password Encryption</h2>
To explain password encryption effectively, we must first grasp the language. Several terms might be unfamiliar, so here is a quick intro to password encryption terminology.
<ul>
<li style="font-weight: 400;" aria-level="1">Key: Used to lock and unlock passwords using a random string of bits. You get private and public keys that crypt and decrypt data differently, but we won't get too deep in the weeds with keys!</li>
<li style="font-weight: 400;" aria-level="1">Bits: A logical state with one of two possible values, including 1/0, true/false, yes/no, or on/off as typical examples.</li>
<li style="font-weight: 400;" aria-level="1">Block (block cipher): A deterministic algorithm operating on fixed-length groups of bits, called blocks.</li>
<li style="font-weight: 400;" aria-level="1">Hash function: The algorithm that uses the key to create password encryption and decryption. A hash function is essentially a piece of code that runs every time someone saves a password or logs into an application.&nbsp;</li>
<li style="font-weight: 400;" aria-level="1">Hash: A random series of numbers and letters representing your password. The hash function uses your hash instead of the raw password for authentication.</li>
<li style="font-weight: 400;" aria-level="1">Salt: Additional letters and numbers appended to the hash</li>
</ul>
&rlm;&rlm;&lrm; &lrm;
<h2>How Does Password Encryption Work?</h2>
When you save a new password, a hash function creates a hash version and saves that on the server.&nbsp;
Every time you log in using your password, the hash function recreates the hash to see if it matches what's stored. If the hashes match, the algorithm passes the authentication and logs you in.&nbsp;
For example:
<ul>
<li style="font-weight: 400;" aria-level="1">Original password: Pa$$w0rd123</li>
<li style="font-weight: 400;" aria-level="1">Hashed password: 6AF1CE202340FE71BDB914AD5357E33A6982A63B</li>
</ul>
While this might seem secure, simple hashed passwords aren't hack-proof.
The hash function only creates a unique hash for each password, not each user. So, if multiple users have the password, Pa$$w0rd123, the hash will be exactly the same.
To overcome this encryption vulnerability, engineers salt passwords so each hash is unique, even if the passwords are identical.
<h3>How Salt Works</h3>
A salt appends a unique value of 8 bytes (16 characters) to the password before the hash function creates a hash. This way, even identical passwords are unique before the hash function.
For example:
<ul>
<li style="font-weight: 400;" aria-level="1">Two identical passwords: Pa$$w0rd123</li>
<li style="font-weight: 400;" aria-level="1">Salt value one: E1F53135E559C253</li>
<li style="font-weight: 400;" aria-level="1">Salt value two: 84B03D034B409D4E</li>
<li style="font-weight: 400;" aria-level="1">Password one before hash: Pa$$w0rd123E1F53135E559C253</li>
<li style="font-weight: 400;" aria-level="1">Password two before hash: Pa$$w0rd12384B03D034B409D4E</li>
<li style="font-weight: 400;" aria-level="1">Password one hashed value (SHA256): 72AE25495A7981C40622D49F9A52E4F1565C90F048F59027BD9C8C8900D5C3D8</li>
<li style="font-weight: 400;" aria-level="1">Password two hashed value (SHA256): B4B6603ABC670967E99C7E7F1389E40CD16E78AD38EB1468EC2AA1E62B8BED3A</li>
</ul>
&rlm;&rlm;&lrm; &lrm;
<h2>5 Common Password Encryption Methods</h2>
<h3>1. Data Encryption Standard (DES)</h3>
While applications no longer use Data Encryption Standard (DES), it's important to mention this password encryption method because of its history and influence on more secure modern standards.
IBM developed DES as a 56-bit encryption technology in the early 1970s. The NSA adopted and improved DES before it was approved worldwide as the encryption standard.
However, since the late 70s, hackers have been able to break DES encrypted passwords. In 1999, ethical hackers managed to break a DES key in under 24 hours.&nbsp;
To make DES more secure, engineers created Triple DES and later Advanced Encryption Standard (AES), which we still use today.
<h3>2. Triple DES</h3>
Triple DES uses three 56-bit keys (blocks) to create 168-bit encryption (some security experts argue that Triple DES is only 112 bits strong). Although Triple-DES is slowly being phased out, many financial institutions still use it to encrypt ATM PINs.
<h3>3. Advanced Encryption Standard (AES)</h3>
AES is the new encryption standard&mdash;trusted by the United States Government and many other prominent organizations globally. At 128 bits, AES is sufficiently secure, but most organizations prefer heavy-duty 256-bit encryption.
At <a href="https://teampassword.com/security">TeamPassword</a>, we use 256-bit encryption to store passwords, ensuring the highest levels of security for our clients. We're also a <a href="https://teampassword.com/security">secure hosting provider</a> holding multiple security accreditations.
Hackers can only break an AES encrypted password through a brute-force attack&mdash;trying password combinations to find the right one.
To counter brute-force attacks, applications will lock an account after a certain number of attempts or use tools like Google's reCAPTURE.
<h3>4. Blowfish</h3>
American cryptographer, Bruce Schneier, designed Blowfish in 1993 as an antidote to the weak DES encryption. Blowfish uses a 64-bit block and variable key length of 32 to 448 bits.
Although Blowfish is more robust than its DES predecessor, the 64-bit block is still vulnerable to attacks, most commonly birthday attacks&mdash;a cryptographic attack that exploits the mathematics behind the algorithm.
To solve Blowfish vulnerabilities, engineers created Twofish in 1998 (128-bit blocks with 256-bit keys) and Threefish in 2008 (256, 516, 1024-bit blocks with 256, 516, 1024-bit keys).
<h3>5. Rivest-Shamir-Adleman (RSA)</h3>
RSA is one of the oldest and widely used to transfer data securely. The encryption works with two keys, two large prime numbers, and an additional auxiliary value.
Due to the complicated encrypting and decrypting process, there is no known method for breaking RSA encryption.&nbsp;
Although widely used for transferring data, RSA is slow and not suitable for password encryption.
&rlm;&rlm;&lrm; &lrm;
<h2>Why Strong Passwords Matter</h2>
Password encryption can only prevent criminals from viewing saved credentials stored on a server&mdash;but cannot prevent hackers from guessing weak/commonly used passwords. If you <a href="https://teampassword.com/blog/colonial-pipeline-ransomware-attack-dont-reuse-passwords">reuse the same password for multiple accounts</a>, this also puts you at risk!
Encryption is most effective when users create robust, unique passwords for every account. For example, a random 32-character password with letters, numbers, and special characters hashed and salted is near impossible to guess or decode, even using a computer!
In another scenario, let's assume you have a strong 32-character password, but you use it for every account. If hackers manage to steal that password, they have access to every account using the same credentials! Your strong password is effectively useless.
<h3>Improving Your Password Management</h3>
Now that you understand password encryption and the associated vulnerabilities, you can see why strong passwords are essential.
Effective password management is crucial to protect yourself against cyberattacks or in the highly likely event of a data breach where hackers steal your credentials.
Criminals are after the low-hanging fruit&mdash;people who use weak passwords!
5 tips for creating stronger passwords:
<ol>
<li style="font-weight: 400;" aria-level="1">Create strong passwords for every account. The easiest way to do this is using a password generator. <a href="https://teampassword.com/password-generator">TeamPassword has a free password generator</a> anyone can use to create passwords from 12-32 characters using uppercase, lowercase, numbers, and special characters. We recommend creating passwords as long as the application will allow.</li>
<li style="font-weight: 400;" aria-level="1">Never create passwords shorter than eight characters, with 12 being our recommended minimum.&nbsp;</li>
<li style="font-weight: 400;" aria-level="1">Never reuse the same password for multiple accounts.</li>
<li style="font-weight: 400;" aria-level="1">Never create passwords with your name, family member's names, or pet's names. With social media, this information is freely available. Criminals can add those names to algorithms for brute-force attacks.</li>
<li style="font-weight: 400;" aria-level="1">Don't store passwords in digital notepads or spreadsheets. We recommend using a <a href="https://app.teampassword.com/dashboard#signup/testimonial">password manager like TeamPassword</a> to create and store your credentials.</li>
</ol>
&rlm;&rlm;&lrm; &lrm;
<h2>Why You Need a Password Manager like TeamPassword</h2>
We have so many accounts these days; it's almost impossible to create unique, memorable, secure passwords for each one. A password manager solves this problem.
Instead of remembering the credentials for every account, you only need to memorize the one to log into your password manager.&nbsp;
TeamPassword keeps all of your credentials safely stored and encrypted, so you never have to memorize a password again. Instead of entering your credentials, you use one of TeamPassword's browser extensions (Chrome, Firefox, and Safari) to log into accounts.
<h3>Built for Teams</h3>
TeamPassword's best feature is its ability to share credentials with team members securely. Instead of sharing passwords, you provide access through TeamPassword.&nbsp;
Employees <a href="https://app.teampassword.com/dashboard#signup/testimonial">use TeamPassword</a> to log in, meaning you never share raw passwords&mdash;no more worrying about unauthorized access or sharing.
You can create groups in TeamPassword to share access with employees, clients, contractors, and freelancers. When someone no longer needs access, remove them from the group with a single click. No need to change passwords every time someone leaves a project!
<h3>Built-In Password Generator</h3>
TeamPassword features a built-in secure password manager so you can create robust passwords for every account. TeamPassword also ensures you never reuse the same credentials so that you won't fall victim to credential stuffing attacks!
With a built-in password generator, you can change passwords regularly, and TeamPassword will update the new credentials for all users!
<h3>Monitor Login Activity</h3>
TeamPassword's activity log keeps track of every action across all of your accounts&mdash;logins, password changes, new team members, sharing access, and more.
You can also set up email notifications for all TeamPassword actions so that you can react fast to any suspicious activity.
<h3>Get Your Free TeamPassword Trial</h3>
Password encryption is not enough to protect your business from password vulnerabilities! You need a robust password manager like TeamPassword to create, store, and share credentials securely.
&rlm;&rlm;&lrm; &lrm;
<a href="https://app.teampassword.com/dashboard#signup/testimonial">Sign up for a 14-day free trial</a> and let TeamPassword secure your company's digital assets.

Password encryption is the number one component of password security. TeamPassword encrypts passwords with state-of-the-art technology to keep passwords safe.

Password encryption is the number one component of password security. TeamPassword encrypts passwords with state-of-the-art technology to keep ...

What is password encryption and how much is enough?

Everything you need to know about making secure passwords and storing, sharing, and organizing them securely.

A passwordless future may materialize, but for the time being the vast majority of services rely on the ...

Ultimate Guide to Password Security (2023 Edition)

A passwordless future may materialize, but for the time being the vast majority of services rely on the uncomplicated functionality of username/password. Use the Table of Contents to skip to the information you need. Organize your passwords What if a password manager gets hacked? Create strong passwords Turn on 2FA ...

The importance of mobile devices has grown significantly as the number of <a href="https://www.statista.com/statistics/617136/digital-population-worldwide/" rel="follow noopener" target="_blank">internet users</a> increases. Not only are they supremely convenient for communication and entertainment on the go, but many of the programs and websites we use at the office now exist in mobile applications - meaning we never leave our work behind.&nbsp;
Uninterrupted connectivity means uninterrupted risk of our data being stolen. Mobile devices, like any device connected to the internet and capable of data transfer, have vulnerabilities. And though mobile operating systems are often tightly secured and able to stop users from accidentally installing a virus, we should be just as educated and deliberate when using them.&nbsp;
Read on to learn five ways you may be unwittingly exposing your data.
<h2>1. Outdated Security Software</h2>
The two ubiquitous mobile operating systems, Android and iOS (and its cousin iPadOS), come with stringent security installed. On Android, Play Protect regularly scans your entire device for malicious apps, not just apps downloaded from the Play store.&nbsp;
iPhones employ a system whereby no app knows what any other app is doing, unless of course you give it that permission - such as allowing Instagram to look at your photos. Safari, the built-in browser on iPhones, typically does a good job of warning you when accessing a suspicious site. iPhones do not allow you to install third party security software unless they&rsquo;ve been jailbroken (more on that below). The built-in security features on iPhones are typically enough, provided you keep your device up-to-date.&nbsp;
On that note: do stay on top of your software updates. Operating systems are regularly patched as new vulnerabilities are found - which is often.
For iOS devices, go to Settings &gt; General &gt; Software Update.
If you have an Android, your first step should be to ensure that Play Protect is working and scanning your device regularly.&nbsp;
Open the Play Store app &gt; tap your profile icon &gt; tap Play Protect. It will tell you the last time your device was scanned and if any threats were found.&nbsp;
And of course, check for software patches.&nbsp;Settings &gt; System &gt; System update&nbsp;(path may be different depending on the device).
<a href="https://developers.google.com/android/play-protect" rel="follow noopener" target="_blank"><img src="https://cdn.buttercms.com/D46UsujTQz6NOJLUJCIY" alt="undefined" width="289" height="488" /></a>
If you use your Android device for banking, work, and research rabbit holes, you may want to invest in additional security.
When downloading any app it&rsquo;s a good idea to <a href="https://joyofandroid.com/category/apps/" rel="follow noopener" target="_blank">check reviews first</a>. Android apps have gotten better in recent years but bad ones still slip through. With so many different Android devices, it's not always easy to know how an app will perform. Reviews can help you pick the right app without trying a bunch of duds.
The next time you're looking for a new app, check the reviews to get a better idea of what you're getting yourself into. If you're concerned about your mobile device being hacked, install security software and keep it up to date. You should also choose strong passwords and avoid using the same password on multiple devices or websites.
<h2>2. Weak Passwords</h2>
A weak password is like a skeleton key that cybercriminals can easily guess. If your passwords are simple and reused across accounts you&rsquo;re opening yourself to a comprehensive breach.
A good starting point for your passwords is to make them 12+ characters with a mix of letters, numbers, and symbols. How do you remember unique, complex passwords for all your accounts? You don&rsquo;t. Let a <a href="https://teampassword.com/" rel="follow noopener" target="_blank">password manager</a> do that for you. Password managers have mobile apps, so there&rsquo;s no excuse not to use one.&nbsp;
A password manager also removes the frustration of mistyping your passwords on touch keyboards.
Don&rsquo;t just rely on your passwords. We strongly recommend enabling MFA (multi-factor authentication) on all applications that allow it. This means that in addition to your password you'll need a second factor, such as a security code from an Authenticator app, to access your account.&nbsp;
<img src="https://cdn.buttercms.com/0DIRx1gaS8CNBbyupiQW" alt="undefined" width="716" height="477" />
<h2>3. Sharing passwords via text, email, Slack etc</h2>
Text, emails, Slack messages, and other messaging apps are not appropriately encrypted for password sharing. Not only are the apps themselves comparatively easy to hack (or social engineer your way) into and intercept data from, but it&rsquo;s simply too easy to misplace your phone. Once someone gets past your lock screen, how hard is it for them to get into your email, text messages, or workspace?&nbsp;
Passwords should live in a password manager with industry-standard encryption. If you need to share passwords with teammates or family, use a vault that allows easy sharing without the passwords needing to leave an encrypted environment.&nbsp;
<h2>4. Unverified Links</h2>
You may unwittingly compromise your passwords or install viruses when opening links on your mobile device. These can come from malicious websites, email attachments, or an unverified text message claiming your credit card has been compromised and that you need to &ldquo;Click Here!&rdquo; to freeze it (always call your bank directly).&nbsp;
Some websites may not be <a href="https://www.cloudflare.com/learning/ssl/why-is-http-not-secure/#:~:text=HTTPS%20is%20HTTP%20with%20encryption,far%20more%20secure%20than%20HTTP." rel="follow noopener" target="_blank">properly secured with HTTPS</a>. Modern browsers should warn you when entering an unsecured HTTP environment. If you enter sensitive information on such websites, it may be visible to cybercriminals.&nbsp;
Please handle any suspicious content on a computer with good antivirus installed. If you must examine a link while using a mobile email app, long-press on the link or button to reveal the URL. If it&rsquo;s not completely showing, copy the URL and paste it into your notes app.&nbsp;
For attachments and the like, only download them if you know you can trust the source.&nbsp;
<h2>5. Jailbreaking or Rooting Your Phone</h2>
Jailbreaking or rooting - technically two different processes -&nbsp; are typically done in order to install software or otherwise customize your phone in a way that the manufacturer does not allow by default. Jailbreaking is the term used when done to an iPhone, and is viewed by Apple as a violation of its end-user license agreement. Rooting - the process of becoming a superuser on Android - is allowed by a number of Android phone manufacturers.&nbsp;
In either scenario you are gaining power over your device that the manufacturer did not originally intend. With this increased control comes a proportional increase in risk. It becomes much easier to download malware, and if a criminal gets ahold of your privilege-escalated device, they can find ways to bypass your passwords to scour your storage for whatever information is held there. They can also control camera and mic permissions, enabling all sorts of nefarious activities.&nbsp;
The change in security of a rooted device typically renders it unusable for work. If you wish to root your phone, research the inherent dangers and proceed with a healthy dose of caution.&nbsp;
<h2>In Conclusion</h2>
As mobile devices become more capable, our trust in and reliance on them increases. Your smartphone may store credit card and bank info, addresses, pictures of ID, your physical location&hellip;do you even know what's on there? And it&rsquo;s all on a device that can too easily be snatched from a coffee table or slip from your pocket.&nbsp;
I hope these five tips have helped supplement your knowledge and motivated you to take action to strengthen your mobile device security.&nbsp;

Though mobile operating systems are tightly secured, we may unwittingly expose our data if we're not deliberate about how we use them.

Though mobile operating systems are tightly secured, we may unwittingly expose our data if we're not deliberate about ...

5 Reasons Your Smartphone Is At Risk

When I began researching the YouTube giveaway scams, I expected to find a cold trail. It has been over a year since ThioJoe, a tech news and education channel with nearly 3 million subscribers, <a href="https://www.youtube.com/watch?v=-vOakOgYLUI" rel="follow noopener" target="_blank">posted his first video</a> on his experience trying to remove hundreds of impersonators from his videos. Five months later, after Marques Brownlee <a href="https://www.youtube.com/watch?v=1Cw-vODp-8Y" rel="follow noopener" target="_blank">made a video on the topic</a>, YouTube began taking tentative steps to address the issue. But a quick Reddit search reveals that YouTube impersonators and giveaway scams are still alive and well today.&nbsp;
How does the scam work?&nbsp;
The scammer sets up a YouTube profile copying the real creator&rsquo;s profile picture and name. Sometimes the method used to impersonate the channel name is quite clever, such as using foreign characters to create a look-alike, or simply misspelling the name in such a way that our brain is likely to auto-correct it.&nbsp;
<img src="https://cdn.buttercms.com/GkjPMIQQQ22fxdVsX7ZG" alt="undefined" width="940" height="487" />
Other times, the channel name should be an instant giveaway (no pun intended).
&nbsp;<img src="https://cdn.buttercms.com/iqhfkgd5Qampc73RCmr5" alt="undefined" width="868" height="186" />

Once on Telegram, the &ldquo;winner&rdquo; is often asked to pay for shipping. In the example below it is a ridiculous amount - $95 - that keeps going up as long as the victim keeps sending money. As soon as the scammer has fleeced one victim or one YouTuber&rsquo;s channel for everything they can get, they simply change their profile picture and channel name and move on.&nbsp;
<img src="https://cdn.buttercms.com/BMquuNGSRGTiUbEomDwg" alt="undefined" width="697" height="377" />
Who falls for this?
Unfortunately, na&iuml;ve people whose emotions get the better of them and who are elated to have won something from a creator they look up to. If they were to click on the commenter&rsquo;s name they would discover that it is not the same channel - not even close.
These impersonations aren&rsquo;t even that well done or hard to spot, which is even more frustrating to the creators who wonder why YouTube isn't doing something.&nbsp;
<h2>If there&rsquo;s a problem, there&rsquo;s a fix. Right?</h2>
If someone has established an identity on YouTube across tens, hundreds, or even thousands of videos, has shown their face, and maybe even has that Verified checkmark next to their channel name, then someone using their exact profile picture and commenting in their videos claiming to be them should be an easy target for YouTube&rsquo;s algorithm to expunge. Right?
What if they also wrote hundreds of comments on a single video claiming to give away free stuff in a manner that directly violates <a href="https://support.google.com/youtube/answer/1620498?hl=en" rel="follow noopener" target="_blank">YouTube&rsquo;s Contest Policies</a>? Wouldn&rsquo;t it be an easy ban for YouTube to enforce?&nbsp;
And once the channel was banned for scamming, wouldn&rsquo;t their hundreds of scam comments be automatically deleted from the platform?&nbsp;
If you answered NO to all of the above then your perception of YouTube&rsquo;s current capability of handling these scams is sadly accurate.&nbsp;
ThioJoe thoroughly documented his experience reporting the scammers to YouTube. YouTube refused to ban several scam channels impersonating him, claiming that &ldquo;for the rest of the channel[s] that you reported we have confirmed that it didn&rsquo;t violate our community guidelines.&rdquo; ThioJoe checked the channel that YouTube refused to ban, and found it had moved on to spamming other accounts with its WhatsApp scam. So he followed up, linking to the videos where they were active and sending screenshots. YouTube responded: &ldquo;our team actually checked these channels against our guidelines on impersonation and they confirmed that those channels didn&rsquo;t violate our Community Guidelines.&rdquo; Right.&nbsp;
And even for those channels that were banned, their hundreds of scam comments - the crux of the issue - were not removed. That was up to the YouTuber to do manually, comment by comment, video by video. ThioJoe discovered some impersonator accounts that had left over 200 comments on a single one of his videos.&nbsp;
Realizing that YouTube was not going to help him, he <a href="https://www.youtube.com/watch?v=2tRppXW_aKo" rel="follow noopener" target="_blank">made his own app</a> to bulk-delete spam comments - free for anyone to use.&nbsp;
So yes, there&rsquo;s a fix. Just not by YouTube.&nbsp;
<h2>YouTube responds&hellip;kind of</h2>
In April 2022, five months after ThioJoe posted his original video detailing the scams, and shortly after Marques Brownlee - a much larger YouTuber - posted his, YouTube began testing a stricter content moderation tool for creators. On June 30th they released an update disabling the option to hide your subscriber count and limiting the type and/or frequency of special characters in channel names.
It&rsquo;s a start, but it&rsquo;s not enough. While researching this article I learned that fake SpaceX channels have been popping up on YouTube and running cryptocurrency scams. One <a href="https://www.reddit.com/r/SpaceXMasterrace/comments/xyz1u5/finally_youtube_listened_about_that_fake_spacex/" rel="follow noopener" target="_blank">got shut down</a> about a month ago.&nbsp;
So I searched for SpaceX on YouTube, and lo and behold, SpaceX LIVE was livestreaming!&nbsp;
<img src="https://cdn.buttercms.com/855fRWLwTAqATXMaLZ5g" alt="undefined" width="1132" height="570" />
Over 600,000 &ldquo;subscribers&rdquo; (read: bots). 4,000 &ldquo;people&rdquo; watching. And a subscriber&rsquo;s-only live chat claiming that if you send them one BTC (or Ethereum or Monero - they&rsquo;re not picky) you&rsquo;ll get two back. What a deal!
I left this stream running in the background while I worked.&nbsp;
A week later it has been taken down.&nbsp;
<h2>What can we do?</h2>
With YouTube forcing subscriber counts to show, it should be quite obvious when a commenter&rsquo;s account is an impersonation of the creator whose video you&rsquo;re watching. However, in cases such as the fake SpaceX LIVE livestream, the channel probably used bots to get a legitimate-looking subscriber count.&nbsp;
YouTube&rsquo;s contest policy explicitly states that you must have official rules for the contest. If the creator hasn&rsquo;t mentioned that they&rsquo;re doing a giveaway&hellip;then they&rsquo;re not.&nbsp;
In general, use common sense. If they&rsquo;re asking you to give something to get something, don&rsquo;t. You can always post a screenshot to /r/Scams to get another opinion.&nbsp;
In the meantime, creators will continue to suffer as the mysteries of YouTube&rsquo;s algorithms rampage across the platform, striking original, legitimate videos and sparing scammers their comeuppance.

The YouTube scams rage on and creators are frustrated. YouTube has implemented tools to fight impersonators, but is it enough?

The YouTube scams rage on and creators are frustrated. YouTube has implemented tools to fight impersonators, but is ...

The YouTube-Telegram Giveaway Scam

While there is no hard and fast rule, experts agree that it is wise to change your passwords every 90 days. Yup, every 90. If the very thought of going through each and every one of your 127 passwords and updating them every 90 days makes you want to click off this article - don&rsquo;t.&nbsp;
With a little knowledge, this tedious task can be made easier and safer. We&rsquo;ll also share why it&rsquo;s an essential part of securing your accounts and that it's:
<ol>
<li style="font-weight: 400;" aria-level="1">Worth your time, and</li>
<li style="font-weight: 400;" aria-level="1">Not as overwhelming as it seems if you&rsquo;re using the right tools</li>
</ol>
Aside from learning to spot <a href="https://teampassword.com/blog/your-passwords-are-only-as-secure-as-your-teams" rel="follow noopener" target="_blank">social engineering attacks</a>, regularly changing your passwords is one of the easiest actions you can take to minimize the probability of being hacked.&nbsp;
<h2>What&rsquo;s the point of changing my password?&nbsp;</h2>
Does changing my password really make a difference?&nbsp;
Statistics from 2019 found that over 1 million passwords are stolen every week, and that number has only increased during the pandemic. Today, there are over <a href="https://www.securitymagazine.com/articles/97825-24-billion-usernames-passwords-available-on-the-dark-web#:~:text=There%20are%20more%20than%2024,to%20new%20Digital%20Shadows%20research." rel="follow noopener" target="_blank">24 billion username and password combinations available on the dark web</a>.&nbsp;
Changing your passwords absolutely makes a difference in keeping your accounts safe, provided they&rsquo;re strong. Some stolen passwords are exploited right away, but others are leveraged months later. Changing your password could foil months of a cybercriminal&rsquo;s work, which may lead to them focusing their attention on lower-hanging fruit.
<h3>Are my accounts more secure the more I change my password?</h3>
Yes, and no. Provided you are using randomly generated or unique passwords of 12+ characters with symbols and numbers, then updating your most valuable accounts frequently absolutely keeps your accounts more secure.&nbsp;
Frequent, scheduled password changes are only an issue when the task is thrust upon an uneducated employee who hasn&rsquo;t been given the right tools for the job.
Most software solutions that mandate frequent password changes are rendered virtually useless by not giving the user the proper tools. People feel annoyed at being forced to change and memorize a new password, and often game the system, first adding a 1, then a !, then a 2 etc. I was certainly guilty of this at past jobs.&nbsp;
Requiring people to change their passwords without providing a password manager (more on this below) irritates people and does little to bolster your company&rsquo;s security.
Cybersecurity exists on a spectrum: convenient and frictionless on one end, and security on the other. In a perfect world you would change your password every day, but the cost/benefit analysis buckles when you realize that a program like <a href="https://www.zdnet.com/article/following-oldsmar-attack-fbi-warns-about-using-teamviewer-and-windows-7/" rel="follow noopener" target="_blank">TeamViewer can get hacked</a>, rendering a simple security measure such as a password useless.&nbsp;
Ultimately, a combination of new, complex passwords and a <a href="https://teampassword.com/blog/one-time-passwords-vs-two-factor-authentication" rel="follow noopener" target="_blank">second authentication factor</a> is the best we can do.&nbsp;
If your systems require the best available security, look into hardware keys such as Yubico, Google Titan, and Thetis.&nbsp;
<h2>How to change your passwords</h2>
The most common reason people cite for not wanting to change passwords is the time it takes. It&rsquo;s a manual process, and right now there&rsquo;s no way around that. But if you're not using a password manager, your vision of what the process looks like may be needlessly convoluted.
The unknown can be scary.
<img src="https://cdn.buttercms.com/kE8Uzu4ESfebb0whlxAV" alt="undefined" width="752" height="386" />
With a password manager, updating passwords is as simple as:&nbsp;
<ul>
<li style="font-weight: 400;" aria-level="1">Navigate to the &ldquo;change password&rdquo; page of your account settings&nbsp;</li>
<li style="font-weight: 400;" aria-level="1">Click your browser extension. The extension will most likely have pulled up the appropriate record, but if not simply search for it&nbsp;</li>
<li style="font-weight: 400;" aria-level="1">Click &ldquo;edit&rdquo; in your password manager on the account you&rsquo;re updating</li>
<li style="font-weight: 400;" aria-level="1">Use the Password Generator to create a new, strong password</li>
<li style="font-weight: 400;" aria-level="1">Save the password in your manager and on your account</li>
</ul>
Change your passwords with a movie or music in the background! There&rsquo;s no reason it has to be all boring.&nbsp;&nbsp;
<h3>How to make strong passwords</h3>
If the account you&rsquo;re using allows for symbols, then generating a long, random string of symbols, digits, and letters is the easiest and safest option.&nbsp;
If you need to remember the password, try creating a passphrase. Passphrases are strings of words, with a few symbol and number substitutions, that are easy to remember but hard to guess. Part of the reason passphrases are effective is that when it comes to password strength, <a href="https://teampassword.com/blog/tips-and-tricks-to-create-a-strong-password" rel="follow noopener" target="_blank">longer is better</a>. Don&rsquo;t use song lyrics, lines from poems, or anything that can be found in a Google search.&nbsp;
<h3>What are bad passwords?</h3>
Every year, a few websites take the time to bemoan the state of password management by compiling the <a href="https://www.tomsguide.com/news/worst-passwords-2022" rel="follow noopener" target="_blank">worst passwords of the year</a>. The list typically looks much the same. These passwords can be cracked in less than a second by modern software, yet continue to be widely used.&nbsp;
Avoiding bad passwords is mostly common sense. If you use a password generator or take the time to create a 14+ character passphrase, you&rsquo;re probably good. The key is to avoid patterns and personal information.&nbsp;
If someone is choosing to target you, they will scour the internet and social media for personal information. Pet&rsquo;s names, birthdays, your first car&hellip;it&rsquo;s hard to remember everything you&rsquo;ve ever said on the internet. We recommend avoiding such personal information when building your password.
Here are a few that always make the worst passwords list:
<ul>
<li style="font-weight: 400;" aria-level="1">123456</li>
<li style="font-weight: 400;" aria-level="1">123456789</li>
<li style="font-weight: 400;" aria-level="1">qwerty</li>
<li style="font-weight: 400;" aria-level="1">password</li>
<li style="font-weight: 400;" aria-level="1">12345</li>
<li style="font-weight: 400;" aria-level="1">12345678</li>
<li style="font-weight: 400;" aria-level="1">111111</li>
<li style="font-weight: 400;" aria-level="1">1234567</li>
<li style="font-weight: 400;" aria-level="1">123123</li>
<li style="font-weight: 400;" aria-level="1">qwerty123</li>
</ul>
<h2>What is a password manager?</h2>
So far, I&rsquo;ve asseverated that a password manager is a critical tool in your mission for effective password hygiene. But what is its purpose?
In its most basic form, a password manager is a single vault that stores unique passwords for all your accounts. The benefit is that you only need to remember one master password to access the vault.&nbsp;
A good vault such as TeamPassword uses <a href="https://en.wikipedia.org/wiki/Client-side_encryption#:~:text=Client%2Dside%20encryption%20is%20the,as%20a%20cloud%20storage%20service." rel="follow noopener" target="_blank">Client-Side Encryption</a>, which means that even TeamPassword employees, or anyone with access to TeamPassword&rsquo;s database, cannot see your passwords. They also feature AES 256-bit encryption and security accreditations such as ISO 27001, SOC 1 and SOC 2, SSAE 16 and ISAE 3402.
The best vaults allow users to share passwords with team members - be they friends, family, or colleagues. With organizational tools like groups and different user settings, you can control who sees what without exposing your data.&nbsp;
<h3>Should I let my browser save my passwords?</h3>
While Chrome is working to make its password manager more secure, it does not provide enterprise level security or secure sharing.&nbsp;
Chrome is designed to be the most convenient browser on the market, and it succeeds. But if your Google account is breached, your passwords will be revealed. Most of us sync our Chrome profiles so that we can access bookmarks from anywhere. This works against us if one of our devices is stolen.
I won&rsquo;t claim that a real password manager is as convenient as letting your browser handle everything. As I said above, cybersecurity is often a tradeoff between easy and secure. However, if you need to share passwords with team members or family, then Chrome is definitely not the appropriate tool. A dedicated password manager built for sharing is both easier to use and safer.&nbsp;
<h3>How does a password manager work?&nbsp;</h3>
Let&rsquo;s start with what a password manager is not.&nbsp;
<ul>
<li style="font-weight: 400;" aria-level="1">Not a magical tool that automatically updates all your account passwords without you lifting a finger.&nbsp;</li>
<li style="font-weight: 400;" aria-level="1">Does not guarantee that you&rsquo;ll never be locked out of an account again - you could accidentally save different passwords between your password manager and the account you&rsquo;re trying to manage.&nbsp;</li>
<li style="font-weight: 400;" aria-level="1">Does not replace account settings or have administrative control over your accounts. That is, just changing your Instagram password in your password manager does not actually change your Instagram password. You still need to go to your Instagram account settings and make the change there.&nbsp;</li>
</ul>
What does it do?
By storing your sensitive credentials in a host-proof and locally encrypted vault, a password manager stores complex passwords for all your accounts while only requiring you to remember the master password that accesses your vault. Team plans let you safely share account credentials with your team without the credentials leaving an encrypted environment.
<h2>Is TeamPassword a good password manager?</h2>
TeamPassword is one of the best - especially for sharing passwords on teams.
TeamPassword exists so teams can effortlessly access the credentials they need&hellip;and only the credentials they need. Here are a few of the features that make this possible:
<ul>
<li style="font-weight: 400;" aria-level="1">Unlimited number of completely customizable groups such as Marketing, HR, and Billing</li>
<li style="font-weight: 400;" aria-level="1">Records can be part of multiple groups</li>
<li style="font-weight: 400;" aria-level="1">Admins grant or revoke access to each group with the click of a button</li>
</ul>
TeamPassword is designed so that your team will actually use it. The interface is simple and only shows you what you need. We integrate with Google SSO for seamless login into your vault.&nbsp;
<img src="https://cdn.buttercms.com/S5jNIC3TtuXldRHK5V4w" alt="undefined" width="511" height="418" />
We offer a mobile app and extension so your records are accessible everywhere, all the time.
If you&rsquo;re looking for an affordable, easy-breezy to set-up password manager for your team, please <a href="https://app.teampassword.com/dashboard#signup/testimonial">sign up for our free trial</a> and let us know what you think.&nbsp;&nbsp;

We suggest changing your passwords every 90 days. Overwhelmed? Here are some tips to make it easier and reasons why it's worth it.

We suggest changing your passwords every 90 days. Overwhelmed? Here are some tips to make it easier and ...

How Often Should You Change Your Password?

How Often Should You Change Your Password? The Importance of Password Safety

Optus, the second-largest telecommunications company in Australia, confirmed on September 22nd that roughly 9.8 million personal records of current and past customers were leaked. They had no additional info at the time, which left those affected feeling helpless and betrayed.&nbsp;
An unidentified person has taken responsibility for the hack. The hacker demanded $1 million to delete the data. Otherwise, they would release 10,000 personal records a day until they received payment.
The alleged hacker followed up on their threat - once. When payment was not received, they released 10,000 records that likely went straight to the dark web to piece together some profiles - a process whereby bots analyze whether criminals have enough information to target someone with scamming or identity theft. The hacker has since withdrawn their demand, apologized for their actions, and has not released any additional records.&nbsp;
Affected records include everything from phone numbers to driver&rsquo;s licenses and passport numbers.&nbsp;
<h2>Backlash</h2>
Investigating a breach is no small undertaking, and it&rsquo;s impossible to know for certain if Optus acted slower than other industry giants would in an identical situation. However, their attitude and lackluster communication resulted in severe backlash from the Australian government and general public.
Optus framed itself as the victim of a cyberattack despite no evidence of how the personal records were accessed. In an interview with <a href="https://www.smh.com.au/technology/optus-commissions-independent-review-into-hack-20221003-p5bmr5.html" rel="follow noopener" target="_blank">the Sydney Morning Herald</a>, CEO Bayer Rosmarin said, &ldquo;There has been no review and no report on the nature of what has occurred&hellip; so anyone saying anything about it is not talking from a position of knowledge.&rdquo;
This attempt to control the narrative left government officials unimpressed.&nbsp;
Government Services Minister Bill Shorten told reporters, using a suitably Australian metaphor: &ldquo;Optus senior management are kidding themselves if they want a medal for the way that they&rsquo;ve been communicating. Not even a crocodile&rsquo;s going to swallow that.&rdquo;&nbsp;
<h2>The Situation Worsens</h2>
Two weeks later Optus provided additional info. After combing through logs, they claim that only 2.1 million personal records were exposed, of which 900,000 are expired. They said that all affected persons had been contacted, warned users not to open links from email or SMS, and recommended the My Optus app as the safest way to communicate with them.&nbsp;
However, the leaked data goes back to 2017 and includes many ex-customers. How will these people be contacted safely? Does sending one email count as &ldquo;contacted&rdquo;? No one knows. And scammers are capitalizing on the confusion.
Customers are seeing phishing emails, phone calls, and SMS or social media messages asking users to order new SIM cards or update billing information in order to secure themselves from the attack.&nbsp;
<img src="https://imageresizer.static9.net.au/DNxRJtnZyv_3cSTit0z00SxuAl4=/500x0/https%3A%2F%2Fprod.static9.net.au%2Ffs%2F81445f8b-5d9d-4eb6-a475-4503a4115f4a" srcset="https://imageresizer.static9.net.au/DNxRJtnZyv_3cSTit0z00SxuAl4=/500x0/https%3A%2F%2Fprod.static9.net.au%2Ffs%2F81445f8b-5d9d-4eb6-a475-4503a4115f4a 500w, https://imageresizer.static9.net.au/8giVCxs0LcluhV8nbc6w6CHSXy0=/600x0/https%3A%2F%2Fprod.static9.net.au%2Ffs%2F81445f8b-5d9d-4eb6-a475-4503a4115f4a 600w, https://imageresizer.static9.net.au/v7aYqCtwFfAW06vEI2E0JbP_2fw=/800x0/https%3A%2F%2Fprod.static9.net.au%2Ffs%2F81445f8b-5d9d-4eb6-a475-4503a4115f4a 800w, https://imageresizer.static9.net.au/-SfHZJctTIAHRMcJl4wXJZsNEAc=/1000x0/https%3A%2F%2Fprod.static9.net.au%2Ffs%2F81445f8b-5d9d-4eb6-a475-4503a4115f4a 1000w, https://imageresizer.static9.net.au/HiNJ6jw4HpAkMbpJdRakYwRCuus=/1200x0/https%3A%2F%2Fprod.static9.net.au%2Ffs%2F81445f8b-5d9d-4eb6-a475-4503a4115f4a 1200w, https://imageresizer.static9.net.au/mG2v3q3g846PwNGrMjzceIhz9Oc=/1600x0/https%3A%2F%2Fprod.static9.net.au%2Ffs%2F81445f8b-5d9d-4eb6-a475-4503a4115f4a 1600w" sizes="(min-width: 1024px) 800px, (min-width: 768px) 600px, 500px" alt="Scamwatch shared these two separate examples of scams following the Optus cyberhack. Correspondence about sim cards should be deleted, and any correspondence about bill &quot;issues&quot; treated with a high level of caution." width="389" height="219" />
The government agency Scamwatch took the initiative to warn customers about these scams. &ldquo;Optus is not contacting people about their bills and asking you to update information.&rdquo;&nbsp;
In the absence of other directions, people are scrambling to update their passports and driver&rsquo;s license numbers.
<h2>How was the data exposed?</h2>
Knowledge of how the breach occurred is frustratingly scarce.&nbsp;
According to Security Boulevard, &ldquo;Unconfirmed reports suggest that an API Gateway was being used by Optus. If so, that API gateway failed to sufficiently rate limit the attacker's access to Optus's sensitive data.&rdquo;
Security Boulevard <a href="https://securityboulevard.com/2022/10/optus-data-breach-why-vulnerable-apis-are-to-blame/" rel="follow noopener" target="_blank">provides a good overview</a> of possible API vulnerabilities that led to easy personal information extraction. Time will tell if this was the weak link.&nbsp;
Optus is noncommittal regarding whether or not they will release the full review being done by consultancy firm Deloitte. Perhaps this is Optus's ill-conceived attempt to make things seem less bad. If so, they failed to consider that the human imagination proliferates catastrophes, and the possibility that 2.1 million identities are compromised gives it ample fodder.&nbsp;
Optus is now <a href="https://www.optus.com.au/support/cyberattack" rel="follow noopener" target="_blank">attempting open communication through its website</a>, but it may be too little too late to save face.
We&rsquo;re waiting on the results of the investigation to form a picture of what you can do to prepare for future breaches of this nature, or how you can take action to mitigate risk now. Fingers crossed that the findings will get released to the public.&nbsp;
Optus has dug itself a bit of a hole. Government fines loom on the horizon, and user trust is eroded. We shall see how they choose to proceed.&nbsp;
To be continued&hellip;

Learn why Optus got lambasted by the government and public alike for their communication surrounding 9.8 million stolen records.

An overview of the Optus Breach so far: what happened, how Optus responded to victims of the breach, ...

The Optus Breach: How Not to PR

An overview of the Optus Breach so far: what happened, how Optus responded to victims of the breach, and why their communication was lambasted by the government and public alike.

2022 has been a year of tech giants getting breached. Human fallibility continues to be, for the most part, the weakest link in company security. More on that later.&nbsp;
The latest victim is the ubiquitous ride-sharing company, Uber.&nbsp;
<h1>The 2022 Uber Breach - What, How, and Lessons Learned</h1>
This isn&rsquo;t the first time Uber has been breached. In 2016 they allegedly paid hackers $100,000 to delete the data they stole and keep the breach a secret. A year and CEO change later, the hack was publicized, revealing that personal information from over 50 million Uber riders and the driver&rsquo;s license numbers of 600,000 US drivers had been leaked.
Every publicized breach is a chance to learn and prepare. In this article, we will briefly cover what happened with the Uber breach of 2022 and then discuss what companies should do to shore up their defenses.&nbsp;
For more details about the breach itself, Uber <a href="https://www.uber.com/newsroom/security-update/" rel="follow noopener" target="_blank">maintains their own newsroom</a> covering the situation.&nbsp;
<h2>How did the Uber breach happen?</h2>
The 2022 Uber breach was a &ldquo;<a href="https://teampassword.com/blog/your-passwords-are-only-as-secure-as-your-teams" rel="follow noopener" target="_blank">social engineering</a>&rdquo; attack. In social engineering attacks, cybercriminals use psychology to manipulate users into disclosing secret information or taking an action that allows the criminal to access private data.&nbsp;
In this case, one Uber contractor unknowingly allowed the hackers the access they needed. Uber states that &ldquo;It is likely that the attacker purchased the contractor&rsquo;s Uber corporate password on the dark web, after the contractor&rsquo;s personal device had been infected with malware, exposing those credentials.&rdquo;&nbsp;
The attacker then employed an increasingly common attack called MFA (multi-factor authentication) Fatigue. They repeatedly attempted to log in with the stolen password, which caused the contractor to be spammed with authentication requests. Eventually, either by accident or to make it stop, the contractor accepted one such request.
With access to one account, the hacker was able to get into other employees&rsquo; accounts and further elevate their permissions. They took the opportunity to boast of their feat internally.&nbsp;&nbsp;
<img src="https://cdn.buttercms.com/EoRmRO0rRBSwr8DQBQQw" alt="undefined" width="665" height="393" />
Uber has taken cautionary steps, including mandatory password resets and locking down its codebase.&nbsp;
<h2>Who was responsible for the Uber breach?</h2>
They believe LAPSUS$, a hacking group that has taken credit for breaches of Nvidia, Samsung, and Microsoft, to name a few, is responsible.&nbsp;
LAPSUS$ itself is an interesting rabbit hole. They first made headlines by hacking Brazil&rsquo;s Ministry of Health and deleting the health records of millions of people (thankfully the government had backups). LAPSUS$ later breached Nvidia - a technology company famous for its GPUs -&nbsp; and demanded that they make their drivers open-source if they did not wish their data leaked. In March of this year, the London police arrested seven teenagers related to the group. All have since been released, and LAPSUS$ continues its prolific run.&nbsp;
LAPSUS$&rsquo;s goal is unknown, nor do authorities know whether they have backing from a larger organization. Recent activity suggests that members operate from the UK and US, though some suspect ties to South America given their propensity for targeting that region.&nbsp;
For more information about LAPSUS$, Krebs has done great work <a href="https://krebsonsecurity.com/?s=%22lapsus%24%22" rel="follow noopener" target="_blank">documenting their activity</a>.
<h2>What can we learn from the Uber breach?</h2>
The breaches at Microsoft, Cisco, Uber, etc. all have a common pattern. There were no incredible feats of &ldquo;hacking,&rdquo; where a genius criminal breaks through security systems with sweat dripping down their brow as shown on TV. Instead, the attacks were intentional, methodical, and exploited human fallibility.&nbsp;&nbsp;
Humans are the easiest and often the weakest target. Many people see through and avoid becoming victims of social engineering tactics. But among companies like Uber, which employs over 29,000 people and has 122 million users each month, or T-Mobile (<a href="https://teampassword.com/blog/t-mobile-data-breach-2021-what-happened" rel="follow noopener" target="_blank">victim of a major breach in 2021</a>), which employs 75,000 people and outsources much of its customer support, there are more than a few prime targets for cybercriminals.
We may sound like a broken record exhorting you to educate your employees and demand security best practices. But seriously - educate your employees and demand security best practices!
If we&rsquo;ve learned anything from recent breaches, it&rsquo;s that they would not have been possible without successful social engineering.&nbsp;
<h2>How could the Uber breach have been prevented?</h2>
The Uber hackers followed two relatively simple steps:&nbsp;
<ol>
<li style="text-align: left;">Buy compromised passwords</li>
<li style="text-align: left;">Social Engineer an employee&nbsp;</li>
</ol>
<h3>Improve Password Hygiene</h3>
Individuals and companies can reduce the risk of compromised passwords by regularly scheduling password changes. Setting a reminder to appear every 90 days on your phone to change vital passwords and run manual security checks makes it less likely for your passwords to be available for purchase. There are also programs that will monitor personal devices in real-time. These precautions alone aren't enough, as even relatively new passwords can be compromised.&nbsp;&nbsp;
For added security and convenience, <a href="https://teampassword.com/" rel="follow noopener" target="_blank">use a password manager like TeamPassword</a>. Password managers encrypt and store all of your passwords in one secure location. Many even include built-in password generators and mandatory 2FA.&nbsp;
<h3>Use 2FA</h3>
To counter the second step - social engineer an employee - you should use the best 2FA available and stay calm in the face of urgent requests to bypass the security measures you have in place.&nbsp;
Not all 2FA methods are equally effective. Authenticator Apps that generate One-Time-Passwords (OTP) directly on your device and refresh them regularly are more secure than SMS sent via a cellular carrier to your phone. The danger of SMS is mostly due to the possibility of SIM-swapping, where a criminal convinces a carrier to transfer a customer&rsquo;s number to the criminal&rsquo;s own device, thus gaining control of any OTPs. The <a href="https://krebsonsecurity.com/2021/10/fcc-proposal-targets-sim-swapping-port-out-fraud/" rel="follow noopener" target="_blank">FCC is making attempts to stop this</a>, but SMS is still widely used and remains vulnerable.&nbsp;
Using 2FA can be annoying. It requires you to use a second device, and the time it takes adds up. But the security it provides is worth the cost. So use it if you can.
<h3>Don&rsquo;t Act - Ask</h3>
Finally, common sense and a healthy dose of skepticism are essential components of a strong defense. If a request for information seems urgent, doesn&rsquo;t seem familiar, or make sense, then it&rsquo;s best to pause, consider, and confirm. Call the sender or ask a colleague to take a look. No one wants to &ldquo;cry wolf,&rdquo; but cybersecurity is a complex subject, and caution will be appreciated more often than not.
It&rsquo;s always better to get a second pair of eyes on the situation.&nbsp;
<h3>Consider Using Hard Tokens</h3>
The Uber breach has also raised questions about hard vs. soft tokens. Soft tokens are software-based like MFA that uses a passcode or pin. Hard tokens are physical objects that grant access, like a USB or fob.&nbsp;
Hardware tokens are generally much more secure, as proven by the <a href="https://blog.cloudflare.com/2022-07-sms-phishing-attacks/" rel="follow noopener" target="_blank">failed phishing attack on Cloudflare</a> and <a href="https://krebsonsecurity.com/2018/07/google-security-keys-neutralized-employee-phishing/" rel="follow noopener" target="_blank">Google&rsquo;s success in thwarting phishing</a>. Someone has to physically steal the hard key to gain access. However, hard keys are more expensive to purchase and maintain, which has historically precluded them from all but the most high-security applications.&nbsp;
<h2>Final Thoughts</h2>
Cybersecurity is an incredibly dynamic field. Researching the Uber breach and LAPSUS$ motivated me to take inventory of my current 2FA settings and improve security where possible. Hopefully, this overview of the Uber breach has helped you identify an area of improvement for yourself and your company.

The Uber breach shows that human fallibility continues to be weakest link in company security. What can we do about it?

2022 has been a year of tech giants getting breached. Human culpability continues to be, for the most ...

The 2022 Uber Breach

2022 has been a year of tech giants getting breached. Human culpability continues to be, for the most part, the weakest link in company security. More on that later. The latest victim is the ubiquitous ride sharing company, Uber. This isn’t the first time Uber has been breached. In 2016 ...

Team Password Blog | Author noah-bisceglia | Page 1

In an increasingly digital world, we&rsquo;re switching more and more of our daily lives over to the Internet. While this brave new world is exciting and convenient, it&rsquo;s not without its problems.&nbsp;
The issue of unsafe passwords has been around for a while. But have you ever thought about where and how to store them?
Most of us have several passwords, and we&rsquo;re encouraged to never duplicate them. Some people simply write them all down on a piece of paper &mdash; which is fraught with danger. But others store their passwords electronically.
As you&rsquo;re about to find out, not all electronic systems of password storage are <a href="https://www.teampassword.com/blog/10-things-you-need-to-do-to-keep-passwords-safe" target="_blank" rel="noopener">safe</a>. Here are five of the most dangerous ways to store your passwords.&nbsp;
But before we begin:
Avoid bad idea passwords and dangerous storage methods with TeamPassword. This advanced <a href="https://www.teampassword.com/blog/why-you-need-a-password-manager" target="_blank" rel="noopener">password manager</a> features a selection of security features, including password encryption and two-step verification. Sign up for a <a href="https://app.teampassword.com/dashboard#signup/testimonial" rel="follow">free trial</a> today.&nbsp;

<h2>1. Email</h2>
Have you ever emailed yourself a password to ensure you&rsquo;re never without it? Great idea, right? Actually, emailing yourself your passwords is a really bad idea, and here&rsquo;s why:
<ul>
<li>Emails are usually sent in plain text. Without encryption, your passwords are susceptible if your email account is ever compromised.&nbsp;</li>
<li>Unsafe passwords sent via email often pass through several systems and servers. There&rsquo;ll also be a copy in your sent folder. If someone else can access your email account, your passwords become vulnerable.&nbsp;</li>
<li>Some email platforms store data locally on a drive. If someone steals your computer, phone, or tablet, your passwords become vulnerable.</li>
</ul>
A really bad idea for passwords is to send them via email &mdash; either to yourself or someone else. <a href="https://www.teampassword.com/blog/have-i-been-hacked-how-to-know-for-sure" target="_blank" rel="noopener">Hackers </a>and scammers are more resourceful than ever, and they can often steal your information before you realize you&rsquo;ve been compromised.&nbsp;
It&rsquo;s tempting to send a quick email to yourself containing unsafe passwords when you sign up for new online services. For the sake of an extra minute or two, don&rsquo;t give fraudsters easy access to your accounts. Use an encrypted email vault to safeguard all your passwords.&nbsp;
<h2>2. Online Documents</h2>
A lot of people like the convenience of saving crucial information using online document systems such as Google Docs. But this is a bad idea for passwords, as these systems are designed for text &mdash; not sensitive data.
Yes, a password might protect your online document manager from unauthorized access. But what happens if that password is compromised? Many document software platforms don&rsquo;t offer encryption, two-step verification, or even the most basic security measures.&nbsp;
If you use online documents regularly, you&rsquo;re probably accessing your account on a regular basis &mdash; across several devices. What happens if you step away for a moment to buy a coffee, speak to a friend, or use the bathroom?
A criminal can access an unattended online document platform in seconds. And if this happens, it doesn't take a lot of effort to steal your unsafe passwords.&nbsp;
<h2>3. Instant Messaging Service</h2>
Instant messaging services provide us with a convenient way of staying in touch with friends and family. WhatsApp, Facebook Messenger, and Snapchat were designed for private online conversations &mdash; not for storing passwords.
People who store their passwords on these apps do so because they believe they&rsquo;re fully encrypted. While that&rsquo;s often the case, it&rsquo;s important to remember that instant messaging services are often left open and operating in the background.
Imagine someone picks up your phone while you&rsquo;re not paying attention. If you left your device unlocked, that person would be able to access your password in seconds.
It&rsquo;s always a bad idea when passwords are stored on instant messaging services. By nature, these apps are designed to operate in the background &mdash; alerting you when someone sends a message. And because they&rsquo;re open, anyone with the device in their hand might be able to steal your unprotected passwords.&nbsp;
Don&rsquo;t fall into the trap of utilizing bad ideas for password storage. Sign up for a <a href="https://app.teampassword.com/dashboard#signup/testimonial" target="_blank" rel="noopener">free trial</a> with TeamPassword, and give your unsafe passwords the protection they require.
<h2>4. Online Note-taker</h2>
Developers design online note-takers for everyday lists and reminders. While they&rsquo;re great for creating to-do and shopping lists, they&rsquo;re not so good for storing unsafe passwords.&nbsp;
An app such as Apple Notes is easy to use, accessible, and convenient. But it doesn&rsquo;t offer two-step authentication, encryption, or any sophisticated form of security.&nbsp;
If your computer or mobile device is unlocked, your saved passwords are vulnerable. In many cases, a criminal would simply need to open the app to gain access to your sensitive information.&nbsp;
OK, you might be extra vigilant when it comes to keeping your phone or computer locked. But hackers are resourceful, and they&rsquo;re very good at discovering unsafe passwords. Once they access your phone, any passwords stored in your note-taking app become vulnerable.&nbsp;
<h2>5. On a Non-Password-Protected Device</h2>
Of all the bad ideas for passwords, storing them on non-password-protected devices is about the worst. You might think that your tablet or laptop never leaves your side. But if your device is ever stolen, you&rsquo;ve given the criminals the easiest possible opportunity to access your saved passwords.&nbsp;
If you&rsquo;re determined to store passwords on a physical device &mdash; which is never a good idea &mdash; make sure the device password is a complex combination of letters, numbers, and symbols. And it should contain at least 12 characters.&nbsp;
<h2>Use TeamPassword for Extra Protection</h2>
Remembering and safely storing a dozen or more passwords isn&rsquo;t a simple task. By locking away all your passwords in a digital vault, you get maximum protection and easy access.&nbsp;
TeamPassword offers a range of <a href="https://www.teampassword.com/security" target="_blank" rel="noopener">security features</a> &mdash; designed to keep your passwords safe. Offering two-step authentication and encryption, this powerful protection system solves the problem of unsafe passwords with ease. Sign up for a <a href="https://app.teampassword.com/dashboard#signup/testimonial" target="_blank" rel="noopener">free trial</a> to see these exciting features for yourself.&nbsp;

Storing passwords inappropriately can leave you open to fraud and theft. Avoid these storage methods at all costs. | TeamPassword Blog

Storing passwords inappropriately can leave you open to fraud and theft. Avoid these storage methods at all costs. ...

Top 5 Dangerous Ways to Store Your Passwords

Over the last decade, the gig economy boom has allowed professionals worldwide to switch to freelancing and build a network of international clients.&nbsp;
According to Upwork, 1 in 3 US workers engaged in freelance work during 2020. Some of the most successful freelancers earn hundreds of thousands of dollars per year through platforms like Upwork, Freelancer, and Toptal.
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
Does your company hire freelancers? How do you <a href="https://teampassword.com/blog/should-i-share-data-with-freelancers">share passwords with freelancers</a>? TeamPassword is an affordable password management solution for small businesses, startups, and agencies to share credentials securely with team members and freelancers. <a href="https://app.teampassword.com/dashboard#signup/testimonial">Sign up for a 14-day free trial</a> today.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
<h2>10 Successful Freelancers</h2>
Here are ten successful freelancers and what they do. These freelancers have earned their place as experts in their given field with excellent track records&mdash;many have worked with the biggest companies in the world!
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>1. Marcos Rezende - UX designer - Canada</h3>
Marcos Rezende is a UX Designer from Ontario, Canada, with more than 13 years of experience. Marcos has worked in over 30 industry sectors for multinational organizations in the United States, Canada, Germany, and Brazil.&nbsp;
Some of Marcos' notable projects include apps for Ontario's COVID-19 dashboard, Urban Master Planning collaboration platform, and Reaction (kid's e-learning app), to name a few.&nbsp;
Marcos loves sharing his industry expertise with aspiring UX designers and regularly writes for the popular UX publication Career Foundry. Total recognizes Marcos as part of its "Top 3%" of global freelancer talent&mdash;a title given to elite freelancers in their given field.
We don't have access to Marcos' rates, but the best UX designers on Upwork earn upwards of $100 per hour. As a Toptal Top 3% freelancer, Marcos likely charges $200-$300 per hour.
<a href="https://www.marcosrezende.com/">Marcos Rezende's website</a> was nominated for the prestigious <a href="https://www.awwwards.com/sites/ux-portfolio-marcos-rezende">awwwards.</a> in 2021.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>2. Kathy Edens - Marketing Consultant / Freelance Copywriter - United States</h3>
<a href="https://www.upwork.com/freelancers/~016177d19f0624c1a7?viewMode=1">Kathy Edens is a Top Rated Upwork Freelancer</a> with over $300k platform earnings! Kathy has been self-employed as a marketing consultant and freelance copywriter for almost ten years from her home in Ohio, United States.
She holds a Bachelor of Science in Professional Writing and Psychology from Oregon State University, which she says "...helps me understand how to reach your target audience with words."&nbsp;
Kathy has ghost-written several non-fiction books on various topics, including social entrepreneurship, healthcare, real estate investing, and the cannabis industry, to name a few.
Kathy also writes web content, sales pages, email marketing content, case studies, white papers, brochures, press releases, and more. Kathy's rates start at $86 per hour for her writing and marketing services.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
<h3>3. Koen van Oeveren - UX designer - Netherlands</h3>
Koen van Oeveren is a freelance UI &amp; UX designer from North Brabant, Netherlands, with almost ten years of experience. Koen works with several design agencies in the Netherlands, designing apps, websites, and eCommerce experiences for many international brands.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
Koen holds a Bachelor of Applied Science in Communication and Multimedia Design from Avans University in the Netherlands. Koen's <a href="https://www.koenvo.com/index.html">portfolio website Koenvo</a> was nominated for a <a href="https://www.awwwards.com/sites/koenvo-ui-ux-portfolio">2021 awwwards. Award</a>.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
<h3>4. Pascal Strasche - Product / UX designer - Germany</h3>
Pascal Strasche is a product and UX designer with more than ten years of design experience from Germany. He holds a Master of Arts in Interaction Design and a Bachelor of Arts in Graphic Design, both from HAWK University of Applied Sciences and Arts.
For almost a year over 2020/2021, Pascal worked as the sole product designer to design Con Cubo's SaaS tool that helps complex organizations visualize and manage teams. He's also worked with German steel giant XOM Materials to find product solutions to digitalize&nbsp;Germany's steel industry.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
In 2019, Pascal founded Product Design Resources, a growing archive of 800+ design resources, weekly updated for the design community.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>5. Paul Hunkin - Developer - New Zealand</h3>
Paul Hunkin is a freelance software consultant and developer from Tauranga, New Zealand, but currently living in Portugal.&nbsp;
Paul has over ten years of experience as a software developer with an impressive work history, including Google, NASA, InfoSys, and the Chinese aerospace industry leader COMAC.
He's worked with several early-stage startups designing everything from high-performance big-data systems to complex web applications to 3D rendering engines. He's also built a lot of the foundational code for independent games on Android.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
Paul is a Top Rated Upwork Freelancer with over $400k in platform earnings. His rates start at $120 per hour for software development. <a href="https://paulh.consulting/">Check out Paul's website</a> for more about his impressive portfolio and work history.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>6. Jana Galat - Writer / Brand Strategist - Canada</h3>
Jana Galat is a freelance copywriter and brand strategist from Ontario, Canada. She holds a Bachelor's Degree in Management and Organizational Studies from King's University College and an Honors in Business Administration from Western University.
Jana has extensive experience writing landing pages, email campaigns, social media ads, and print materials and says, "I am obsessed with creating copy that sells..."
After several years of professional work experience, Jana went freelance in 2019 and has quickly built a reputation as a <a href="https://www.upwork.com/freelancers/~01bfa17a48301876dd">Top Rated Upwork Freelancer</a> with over $70k in platform earnings. Jana's rates start at $100 per hour for copywriting and brand consulting.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>7. Kate H. - Logo Designer / Branding Expert - United States</h3>
Kate is a freelance professional logo designer and branding expert from Maryland, United States. Kate&nbsp;ran her own green wedding brand which she sold to mywedding.com in 2014, allowing her to focus on helping small&nbsp;businesses figure out what they want (and who they are) and translate that into design.
She holds a Master's degree in Environmental Management from Yale School of The Environmental, and a J.D. in environmental law from Pace Law School.&nbsp;
Kate's skillset includes redesigning and updating material to make it easier to understand, building a consistent brand from a simple starting point like a logo, and creating unique logos that guarantee results.
Kate is a Top Rated Upwork Freelancer, and her rates start at $225 per hour. You can find out more about Kate on her <a href="https://www.upwork.com/freelancers/~013ce73876c1c18126" rel="follow noopener" target="_blank">Upwork profile</a>.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>8. Xhensila Zemblaku - Art Director - Canada</h3>
Xhensila Zemblaku is a freelance art director, UX/UI designer, and illustrator from Markham, Canada. She holds a Bachelor of Fine Arts from Ryerson University with almost ten years of experience.
Xhensila has been a freelancer for most of her professional career and earned over <a href="https://www.upwork.com/freelancers/~01a08d1fcc6ea8fbcb">$400k on Upwork</a>, completed over 150 jobs, and 4,663 hours!&nbsp;
Xhensila's work includes typography, print design, UX/UI design, web, and mobile design. She's a Top Rated Upwork Freelancer currently charging $200 per hour for various creative gigs.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>9. Tanya Litvinova - UX/UI Designer - United States</h3>
Tanya Litvinova is a freelance UX/UI designer from New York City, United States. She holds a Bachelor of Fine Arts in Advertising Design / Communication Design from the Fashion Institute of Technology.
Tanya specializes in product, mobile, and web design as well as user experience flow, research, and validation.
"I have a passion to make the complex simple, shape behavior, design, plan, and strategize. Aiming for the best user experience, all the while balancing the needs of business and technology to create engaging, habit-forming digital products."
Tanya has worked with Fortune 100 &amp; Fortune 500 companies and successfully delivered business-transforming data-driven analytics, responsive BI dashboards, enterprise web apps, and management systems. Some of Tanya's notable clients include KOCH Industries, BlackRock Financial, BCG Group, and FireEye, to name a few.
<a href="https://www.upwork.com/freelancers/~0165035041b26e96df">Tanya is a Top Rated Upwork Freelancer</a> with more than $200k platform earnings. Her current rate starts at $162.50 per hour.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>10. Guangming Lang - Data Scientist - United States</h3>
Guangming Lang is a freelance data scientist from Michigan, United States. He holds a Bachelor of Arts in Mathematics from New College of Florida and a Master of Science in Biostatistics from the University of Michigan. Guangming has also completed several Coursera courses in data science and machine learning.
Guangming has been a freelancer since 2013 and has worked across several industries, including fintech, trading, medicine, biotech, advertising, and HR.&nbsp;
Guangming is a Top Rated Upwork Freelancer with over $400k in platform earnings. He's completed 216 jobs on Upwork totaling 3,805 hours! Guangming's current rates start at $200 per hour.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
<h2>Secure Freelancer Workflows With TeamPassword</h2>
No matter how talented or reputable the freelancers and contractors you hire, your company must use secure workflows to protect your digital assets.
Freelancers often need access to shared accounts and tools. Using a <a href="https://app.teampassword.com/dashboard#signup/testimonial">password manager</a> is the first step to securing these accounts and platforms. You can also use a password manager to share credentials with employees, clients, and other stakeholders to ensure you never expose raw passwords via email, spreadsheets, chat apps, and other non-secure methods.
<a href="https://app.teampassword.com/dashboard#signup/testimonial">TeamPassword</a> lets you create groups to share access with only those who need it. When they're done, revoke access with a single click. No need to change passwords every time someone leaves the team.
If you do need to change a password, TeamPassword's built-in <a href="https://teampassword.com/password-generator">password generator</a> lets you create secure passwords between 12-32 characters using numbers, letters (uppercase/lowercase), and symbols.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
Ready to onboard clients and freelancers securely with TeamPassword's robust <a href="https://app.teampassword.com/dashboard#signup/testimonial">password management solution</a>? <a href="https://app.teampassword.com/dashboard#signup/testimonial">Sign up for a free trial</a> to secure your company's digital assets today!

Here are ten successful freelancers and what they do. These freelancers have earned their place as experts in their given field.

Here are ten successful freelancers and what they do. These freelancers have earned their place as experts in ...

10 extremely successful freelancers and what they do

Here are ten successful freelancers and what they do. These freelancers have earned their place as experts in their given field with excellent track records—many have worked with the biggest companies in the world!

Usernames are essential for security and anonymity online. But some people come up with username ideas to stand out or align with a brand. Usernames can also help gain followers or build a social media following.
With so many possibilities, coming up with username ideas can be challenging! Luckily, there are plenty of tools and methods to create unique usernames.
Whether you're aiming for fame or privacy, we have username ideas to help you create unique usernames easily!
Using unique credentials (including passwords and usernames) can mitigate many cybersecurity vulnerabilities. When paired with a <a href="https://app.teampassword.com/dashboard#signup/testimonial">password manager like TeamPassword</a>, strong usernames and passwords can protect you against attacks. Sign up for a 14-day free TeamPassword trial today!
&nbsp; &nbsp;&nbsp;
<h2>Why You Need to Use Unique Usernames</h2>
There are several reasons people want unique usernames ideas:
<ul>
<li style="font-weight: 400;" aria-level="1">Security</li>
<li style="font-weight: 400;" aria-level="1">Anonymity</li>
<li style="font-weight: 400;" aria-level="1">Popularity</li>
<li style="font-weight: 400;" aria-level="1">Humor</li>
<li style="font-weight: 400;" aria-level="1">Business name ideas</li>
</ul>
&nbsp; &nbsp; &nbsp;&nbsp;
<h3>Unique Usernames for Security</h3>
Many people don't know about the importance of using unique or secure usernames for online security. Reusing usernames can be just as troublesome as <a href="https://teampassword.com/blog/colonial-pipeline-ransomware-attack-dont-reuse-passwords">reusing passwords</a>.
If criminals steal your credentials from a <a href="https://teampassword.com/blog/category/data-breaches">data breach</a>, they can use your username to figure out where else you have accounts and deploy spear-phishing attacks using fake correspondence to steal your credentials.
For example, hackers will send you a "password reset" from Instagram because they "suspect suspicious activity!" If you use unique usernames for every account, the attackers won't find your Instagram profile!
Don't think that you won't fall for these ploys! Many individuals with regular cybersecurity training fall victim to phishing attacks. Cybercriminals know that if they keep trying, they'll catch you when you're distracted or in a hurry.&nbsp;
In effect, unique usernames act as a second password, preventing anyone from finding your accounts with a single username.
What are some username mistakes that could put you at risk?
Don't use easy-to-guess information that could be found elsewhere on the web or sensitive info such as your social security or phone number.&nbsp;
<h4>What should not be included in a username so that it's secure?</h4>
<ol>
<li>
Personal Information: Avoid using any personal information such as your real name, date of birth, or address as part of your username.
</li>
<li>
Passwords or PINs: Do not use your passwords, PINs or other sensitive information as your username.
</li>
<li>
TMI: Do not include too much information that could potentially give away your identity, such as your phone number or email address.
</li>
<li>
Phishing Traps: Do not include any words or phrases that could be used in phishing attempts, such as "password", "admin", "login", etc.
</li>
</ol>
<h3></h3>
<h3>Unique Usernames for Anonymity</h3>
Aligned with security is anonymity. Maintaining anonymity online can protect you from cyberattacks and prevent work colleagues, clients, and other companies or individuals from finding you online.
Many people want to separate their professional profiles from their personal ones while maintaining an online presence. Using unique usernames can hide the profiles you prefer to keep private.
&nbsp; &nbsp;
<h3>Unique Usernames for Fame, Popularity, Attention</h3>
A good Instagram username can help you stand out and boost your online presence. If your username is unique or obscure, it could lead to more profile clicks and followers.
A good example is French Connection UK or @FCUK. At first glance, the username looks like an expletive, drawing people's attention to the brand.
People often use made-up words, obscure combinations, and other naming conventions to grab attention online.
&nbsp; &nbsp;
<h3>Unique Usernames for Humor</h3>
Humor is another reason people often want unique username ideas. For example, @PickledElephantTusk is sure to get people's attention and perhaps a chuckle at the ridiculousness.
Funny usernames are great for social media profiles, but you might want to avoid these if you're trying to aim for security or anonymity!
&nbsp; &nbsp;
<h3>Business Name Ideas</h3>
Most startups want a unique brand name, including URL and social media usernames. Startups can ensure that every digital touchpoint is unique to their brand by choosing an available unique username first.
While using the same username is necessary for branding on social media channels, companies should always choose different, unidentifiable usernames for non-public accounts&mdash;email marketing apps, keyword research tools, productivity tools, accounting apps, etc.
&nbsp; &nbsp;
<h2>How Can You Get Unique Usernames Ideas?</h2>
There are many places you go for unique username ideas. Here are a few of our best sources for inspiration:
<ul>
<li style="font-weight: 400;" aria-level="1">Pinterest</li>
<li style="font-weight: 400;" aria-level="1">Username generators</li>
<li style="font-weight: 400;" aria-level="1">Google Search - type a word and look through the autocompletes. This is also an excellent way to find trending usernames</li>
<li style="font-weight: 400;" aria-level="1">Instagram hashtags</li>
</ul>
&nbsp; &nbsp;
<h2>Here are a Couple of Methods for Thinking of Great Usernames Ideas</h2>
If you're looking for inspiration, here are three methods for coming up with great username ideas. We've included processes for creativity, speed, and security.
<h3>Creating Your Own Unique Usernames</h3>
The best way to create unique username ideas is by combining two or three mismatched words with a number. First, come up with two or three categories, and then pick a word from each.
For example, let&rsquo;s choose the two categories fish, and US State:
<ul>
<li style="font-weight: 400;" aria-level="1">US State: Idaho</li>
<li style="font-weight: 400;" aria-level="1">Fish: Pufferfish</li>
<li style="font-weight: 400;" aria-level="1">Number: 13</li>
<li style="font-weight: 400;" aria-level="1">@IdahoPufferfish13</li>
</ul>
You can come up with funny and cute usernames using this method. It's also a fantastic creative exercise some people might find entertaining.
&nbsp; &nbsp;
<h3>Use a Username Generator</h3>
If you don't want to waste time coming up with usernames yourself, a username generator is a fantastic option to create unique usernames fast!
Some username generator tools will let you add a prefix, suffix, or number and randomize the rest. This method works well if you're trying to find unique username ideas for a specific industry, like fitness, health, tech, etc.
Some username generators even provide a social media search function to see if your unique username is available on the relevant platforms&mdash;providing you speed and efficiency!
Random username generators are also excellent for security because you avoid familiarity, making it less likely for attackers to find you.
&nbsp; &nbsp;&nbsp;
<h3>Use a Password Generator</h3>
Password generators are great for creating unique username ideas. Password generators produce random strings with letters and numbers, significantly reducing the possibility of someone identifying you.
Try creating a username with TeamPassword's password generator:
<ol>
<li style="font-weight: 400;" aria-level="1">Visit our <a href="https://teampassword.com/password-generator" rel="follow noopener" target="_blank">free password generator</a></li>
<li style="font-weight: 400;" aria-level="1">Deselect symbols (most platforms don't allow symbols in the username. Keep this selected if your platform does allow it!)</li>
<li style="font-weight: 400;" aria-level="1">Our password generator only allows a minimum of 12 characters. If you need a shorter user name, drop the characters you don't need</li>
<li style="font-weight: 400;" aria-level="1">Copy/paste your random username to use when signing up for a new account</li>
</ol>
Remember to use our password generator with uppercase, lowercase, symbols, and numbers to create a secure unique password.&nbsp;
TeamPassword's password manager features a built-in password generator that suggests and pastes a strong password into forms during signup or resets. <a href="https://app.teampassword.com/dashboard#signup/testimonial">Sign up for a free 14-day free trial</a> to start managing your usernames and passwords securely.
&nbsp; &nbsp;&nbsp;
<h2>How You Can Secure Your Accounts Using a Password Manager</h2>
Usernames and passwords are the keys to your individual and company accounts. These credentials prevent attackers from breaching your devices, networks, social media, apps, financial services, and more.
Most companies have hundreds of accounts requiring authentication daily. Often team members need to share access, especially for social media, research tools, productivity apps, store accounts, and marketing tools, to name a few.
<a href="https://teampassword.com/blog/secure-password-sharing">Sharing credentials</a> over email, chat, or via spreadsheets exposes your company, clients, employees, and users to many cybersecurity risks. In some states and countries, sharing passwords this way is illegal!
Using a <a href="https://app.teampassword.com/dashboard#signup/testimonial">password manager</a> is a secure and efficient way to store and share your company's credentials.
Here are five reasons to choose TeamPassword for your company:
<ol>
<li style="font-weight: 400;" aria-level="1">Affordable - Enterprise-grade password managers are often expensive. TeamPassword provides small businesses, agencies, and startups with an affordable password management solution.</li>
<li style="font-weight: 400;" aria-level="1">Secure - TeamPassword is an <a href="https://teampassword.com/blog/what-is-password-encryption-and-how-much-is-enough">accredited secure hosting provider</a> using state-of-the-art encryption technology. We store your passwords using AES-256, trusted by US government agencies and many other organizations globally.</li>
<li style="font-weight: 400;" aria-level="1">Efficient - Share and revoke access in TeamPassword with a single click. Quickly create passwords using our built-in <a href="https://teampassword.com/password-generator">secure password generator</a>.</li>
<li style="font-weight: 400;" aria-level="1">Scalable - TeamPassword's plans scale with your business. Start with as few as five members and upgrade your plan as your workforce expands.</li>
<li style="font-weight: 400;" aria-level="1">Flexible - Employees can sign into accounts using TeamPassword's Chrome, Firefox, or Safari browser extensions&mdash;catering to both Apple and Windows users.&nbsp;&nbsp;</li>
</ol>
&nbsp; &nbsp;
<h2>Password Management With TeamPassword</h2>
TeamPassword makes it easy and secure to share credentials with employees, clients, freelancers, and contractors. Everyone gets a separate TeamPassword login to manage access and monitor activity.
TeamPassword encrypts your passwords, making it impossible for employees (or even TeamPassword staff) to preview raw credentials.
&nbsp; &nbsp;
<h3>Sharing Access With Groups</h3>
Add your team to TeamPassword and create groups to share access to your various accounts. If an employee, contractor, or freelancer leaves the team, simply remove them from the group&mdash;no need to worry about changing passwords!
If you're an agency working with multiple clients and accounts, one TeamPassword account is all you need! Just increase your plan accordingly.
&nbsp; &nbsp;
<h3>Activity Logging</h3>
Keep track of TeamPassword activity, just like an enterprise password manager does. Monitor logins, password changes, credential sharing, and more to spot suspicious activity.
TeamPassword also lets you set up email notifications&mdash;helpful in monitoring sensitive accounts or specific actions, like sharing or adding new users.
&nbsp; &nbsp;
<h3>Two-Factor Authentication (2FA)</h3>
Enabling 2FA on your TeamPassword account prevents attackers from gaining access, even if they steal your employee's username and password.
TeamPassword uses the Google Authenticator app (iOS &amp; Android), requiring a six-digital randomly generated code as the second authentication step. Without the employee's device, hackers can't complete TeamPassword authentication.
&nbsp; &nbsp; &nbsp;
<h2>Start With a Free Trial</h2>
Coming up with unique username ideas isn't enough to protect your company's digital assets from attack. Protect your company's usernames and passwords with <a href="https://app.teampassword.com/dashboard#signup/testimonial" rel="follow noopener" target="_blank">TeamPassword</a>.
<a href="https://app.teampassword.com/dashboard#signup/testimonial" rel="follow noopener" target="_blank">Sign up for a 14-day free trial</a> to test our robust and efficient sharing features with your team today!

See the best way to come up with a new username. We break down types of usernames and give you the best username ideas out there.

See the best way to come up with a new username. We break down types of usernames, why ...

Username ideas to make your logins more secure

See the best way to come up with a new username. We break down types of usernames, why secure usernames are important, and how to create them effectively!

TeamPassword Blog

Browse our carefully created articles about Information Security, Password Management, Product Information, and Modern Business, all written with your team's safety and success in mind.

Most popular articles

Cybersecurity

September 21, 2021 ∙ 10 min read

What is password encryption and how much is enough?

Top 5 Dangerous Ways to Store Your Passwords

10 extremely successful freelancers and what they do

Best types of usernames: username ideas to make your logins more secure

Password Management

February 28, 2023 ∙ 19 min read

Ultimate Guide to Password Security (2023 Edition)

Cybersecurity

November 17, 2022 ∙ 7 min read

5 Reasons Your Smartphone Is At Risk

News

November 10, 2022 ∙ 6 min read

The YouTube-Telegram Giveaway Scam

Cybersecurity

October 18, 2022 ∙ 9 min read

How Often Should You Change Your Password? The Importance of Password Safety

Cybersecurity

October 6, 2022 ∙ 5 min read

The Optus Breach: How Not to PR

Cybersecurity

September 27, 2022 ∙ 7 min read

The 2022 Uber Breach

The Password Manager for Teams

Product

Support

Channels

Legal