In an increasingly digital world, we&rsquo;re switching more and more of our daily lives over to the Internet. While this brave new world is exciting and convenient, it&rsquo;s not without its problems.&nbsp;
The issue of unsafe passwords has been around for a while. But have you ever thought about where and how to store them?
Most of us have several passwords, and we&rsquo;re encouraged to never duplicate them. Some people simply write them all down on a piece of paper &mdash; which is fraught with danger. But others store their passwords electronically.
As you&rsquo;re about to find out, not all electronic systems of password storage are <a href="https://teampassword.com/blog/the-best-ways-to-store-passwords-2023" target="_blank" rel="follow noopener">safe</a>. Here are five of the most dangerous ways to store your passwords.&nbsp;
But before we begin:
Avoid bad idea passwords and dangerous storage methods with TeamPassword. This advanced <a href="https://teampassword.com/blog/best-password-managers-for-teams" target="_blank" rel="follow noopener">password manager for teams</a> features a selection of security features, including password encryption and two-step verification. Sign up for a <a href="https://app.teampassword.com/signup" rel="follow noopener" target="_blank">free trial</a> today.&nbsp;
<h2 id="email">1. Email</h2>
<img src="https://cdn.buttercms.com/efPCc2QZQ7C0OT1KeoKe" alt="" width="655" height="88">
We've all been there: struggling to remember a new password and considering emailing it to ourselves for safekeeping. While it might seem convenient, emailing passwords is a terrible security practice with far-reaching consequences. Here's why:
<ul>
<li data-sourcepos="7:3-7:245">Unencrypted Transmission: Emails often travel in plain text, like postcards. Anyone with access to the data stream &ndash; hackers, scammers, or even compromised servers &ndash; could easily intercept the email and steal your password in its entirety.</li>
<li data-sourcepos="9:3-9:33">Multiple Vulnerable Points: Even if the email itself is encrypted, your password is exposed at several stages. It's stored on your device before sending, sits unencrypted on email servers during transit, and resides in your sent folder &ndash; all potential points of entry for attackers.</li>
<li data-sourcepos="11:3-11:248">Local Storage Risks: Many email platforms store data locally on your devices. If your computer, phone, or tablet is stolen or infected with malware, even deleted emails containing passwords might be recoverable, putting your accounts at risk.</li>
</ul>
The ease with which cybercriminals can exploit these vulnerabilities makes emailing passwords a high-stakes gamble. A stolen password could grant them access to your bank accounts, social media profiles, email itself, and more. The <a href="https://teampassword.com/blog/cybersecurity-complete-guide" rel="follow noopener" target="_blank">damage can be immense</a>, so why risk it for a temporary convenience?

<h2 id="Documents">2. Online Documents</h2>
<img src="https://cdn.buttercms.com/Hh6oH8AzTMSnQFUaPHR9" alt="" width="216" height="235">
A lot of people like the convenience of saving crucial information using online document systems such as Google Docs. But this is a bad idea for passwords, as these systems are designed for text &mdash; not sensitive data.
Yes, a password might protect your online document manager from unauthorized access. But what happens if that password is compromised? Many document software platforms don&rsquo;t offer encryption, two-step verification, or even the most basic security measures.&nbsp;
If you use online documents regularly, you&rsquo;re probably accessing your account on a regular basis &mdash; across several devices. What happens if you step away for a moment to buy a coffee, speak to a friend, or use the bathroom?
A criminal can access an unattended online document platform in seconds. And if this happens, it doesn't take a lot of effort to steal your unsafe passwords.&nbsp;
<h2 id="instantmessaging">3. Instant Messaging Service</h2>
Instant messaging (IM) services like WhatsApp, Facebook Messenger, and Snapchat offer a convenient way to communicate, but they are not designed for securely storing passwords. While some IM platforms offer end-to-end encryption for message content, they lack crucial security features necessary for password management.
People who store their passwords on these apps do so because they believe they&rsquo;re fully encrypted. While that&rsquo;s often the case, it&rsquo;s important to remember that instant messaging services are often left open and operating in the background.
Imagine someone picks up your phone while you&rsquo;re not paying attention. If you left your device unlocked, that person would be able to access your password in seconds.
Here's why storing passwords on IM apps is a security risk:
<ul data-sourcepos="9:1-9:155">
<li data-sourcepos="9:1-9:155">Accessibility on Unlocked Devices: IM apps are designed to run in the background on unlocked devices. This means anyone with physical access to your unlocked phone or computer could potentially view your unencrypted passwords.</li>
<li data-sourcepos="10:1-10:164">Accidental Sharing: A single inadvertent tap or screenshot could send your password to someone unintended, compromising the security of your online accounts.</li>
<li data-sourcepos="11:1-12:0">Limited Security Features: Unlike dedicated password managers, IM applications typically lack features like secure password generation, two-factor authentication, and strong encryption specifically designed to protect passwords.</li>
</ul>
Dedicated password management applications offer robust security features like encryption, secure storage, and auto-fill functionality for logins.
<h2 id="onlinenotetaker">4. Online Note-taker</h2>
While online note-taking applications like Apple Notes offer a convenient platform for managing everyday tasks and reminders, they are demonstrably unsuitable for storing sensitive information, particularly passwords. These platforms, designed for general purpose note-taking, lack the robust security features essential for safeguarding confidential credentials.
Here's why online note-taking apps pose a significant security risk for passwords:
<ul>
<li data-sourcepos="9:3-9:314">Absence of Multi-Factor Authentication: Unlike dedicated password managers, these applications typically do not offer multi-factor authentication (MFA). MFA adds an extra layer of security by requiring a second verification step beyond a simple password, significantly hindering unauthorized access attempts.</li>
<li data-sourcepos="11:3-11:322">Limited Encryption Capabilities: While some note-taking applications may offer basic encryption features, they often fall short of the robust encryption protocols employed by dedicated password management solutions. This weaker encryption leaves sensitive data vulnerable to potential decryption by malicious actors.</li>
<li data-sourcepos="13:3-13:97">Accessibility on Unlocked Devices: Online note-taking apps are designed for ease of use and accessibility. This ease of access translates to a vulnerability. If a user's device remains unlocked and unattended, a perpetrator would only need to access the specific application to view unencrypted passwords.</li>
</ul>
In a world of increasingly sophisticated cyber threats, it is critical to prioritize robust security practices. Online note-taking applications simply do not provide the necessary safeguards for password management. Users are strongly advised to consider secure alternatives, such as dedicated password managers or offline password vaults, to ensure the confidentiality and integrity of their login credentials.
<h2 id="nonpasswordprotecteddevice">5. On a Non-Password-Protected Device</h2>
Of all the bad ideas for passwords, storing them on non-password-protected devices is about the worst. You might think that your tablet or laptop never leaves your side. But if your device is ever stolen, you&rsquo;ve given the criminals the easiest possible opportunity to access your saved passwords.&nbsp;
If you&rsquo;re determined to store passwords on a physical device &mdash; which is never a good idea &mdash; make sure the device password is a complex combination of letters, numbers, and symbols. And it should contain at least 12 characters.&nbsp;
<h2 data-sourcepos="7:1-7:6">Control Your Security and Choose Convenience with TeamPassword</h2>
<img src="https://cdn.buttercms.com/0gCOt5oQBCE1vxckmRZC" alt="The TeamPassword Extension for Chrome lets you sign into any account in seconds" width="828" height="466">
Our digital vault safeguards your passwords with industry-leading AES 256-bit encryption and ironclad two-step authentication. Stop wasting time remembering &ndash; TeamPassword empowers you with secure, one-click logins across all your devices.
<ul>
<li data-sourcepos="9:1-9:157">Divide passwords into groups to share with appropriate team members</li>
<li data-sourcepos="9:1-9:157">Enforce 2FA for all users</li>
<li data-sourcepos="9:1-9:157">View activity logs for all of your records</li>
<li data-sourcepos="9:1-9:157">Use the TeamPassword browser extensions and mobile apps for lightning-fast access everywhere</li>
<li data-sourcepos="9:1-9:157">Save money with affordable plans configured for YOU</li>
</ul>
Don't settle for password purgatory. Take control with TeamPassword. <a href="https://app.teampassword.com/signup" rel="follow noopener" target="_blank">Sign up for your FREE trial today</a> and experience the power of effortless security!

Storing passwords inappropriately can leave you open to fraud and theft. Avoid these storage methods at all costs. | TeamPassword Blog

Storing passwords inappropriately can leave you open to fraud and theft. Avoid these storage methods at all costs. ...

Top 5 Dangerous Ways to Store Your Passwords

Wondering how to organize your passwords as an electrical, HVAC, plumbing, or any other contracting or trade business? We'll explain how to use a password manager, and go over the best tools for your business.

Wondering how to organize your passwords as an electrical, HVAC, plumbing, or any other contracting or trade business? ...

6 Best Password Managers for the Trades (Electricians, Plumbers, HVAC, etc.)

The term "biometrics" gets thrown around a lot. But what counts as a biometric identifier? What are the biometrics types, when did they originate, and which are the most popular?

The term "biometrics" gets thrown around a lot. But what counts as a biometric identifier? What are the ...

What are the Types of Biometrics?

I remember having a conversation with a friend many, many years ago, back when the world wide web was still in its infancy and most people were just buying their first family computer. Back in the halcyon days.
We were talking about passwords, and my friend volunteered proudly that his password was &ldquo;appletree&rdquo;, he thought it was brilliant. He used it everywhere, he never forgot it. If he ever had to update his password and was restricted from using the previous one, he simply used &ldquo;peartree&rdquo; instead. Simple.
You might think that in 2024, this is an absurd thing to bring up. We&rsquo;ve all changed. We&rsquo;ve got wiser to the dangers of the modern world. Applications and websites no longer let you enter passwords as simple as this anyway. We now use stronger passwords that are harder to guess. And we are all, most definitely, computer literate, even our 80-year-old parents and our teenage sons and daughters. Yes sir. No weak link in this chain.
But really, what is the difference between &ldquo;appletree&rdquo; and &ldquo;poochie726&rdquo; (one&rsquo;s adorable poodle, plus said poodle&rsquo;s D.O.B)? Are you telling me that you have never had (or, dare I say...still have!) a password like this? I just don&rsquo;t believe you. Taking it a step further, if we generate a strong password, and come up with this: &ldquo;F_(sLOI:%QI^C]{4&rdquo; What is the point of using &ldquo;F_(sLOI:%QI^C]{4&rdquo; to protect your login, if I know that you are using &ldquo;F_(sLOI:%QI^C]{4&rdquo; to protect your login?
It is only strong if it is unknown, and, not easy to guess by brute force. An apartment block would not use a single key to open every door in the building, so what makes you think that &ldquo;poochie726&rdquo;, nay &ldquo;p00ch!3726&rdquo; for argument's sake, is OK to use for 100 different accounts that span both your personal life and your work life?
<h2>What is Credential Stuffing and Why Should You Care?</h2>
Even when people understand that they need to use strong passwords, it doesn&rsquo;t change the fact that people are faced with the challenge of remembering passwords daily. It quite simply becomes impossible without a password manager, and so people choose to come up with one or two really good ones, and then they use these everywhere. This leaves them open to a type of cyberattack called Credential Stuffing.
Credential Stuffing is when a hacker has a list of known username/password combinations that they &ldquo;acquired&rdquo; (perhaps the result of a previous data breach), and that they then use to try to log in to many other, different website and services. Sometimes they get lucky, hit the jackpot, and find an appletree-kinda person.
It might be that you signed up to a very insecure website 10 years ago that you no longer use or care about, and that this website was part of a data breach (pause &ndash; please&nbsp;<a href="https://haveibeenpwned.com/" rel="follow noopener" target="_blank">go and check</a>, I&rsquo;ll wait). But if you are still using the same password as you did back then, then it means that a hacker could very easily gain access to other accounts and data that you rely on now.
You might think that this type of attack would never work. But it does, and it is happening a lot. It is a growing trend (with a 45% year-on-year increase), that relies on human nature&rsquo;s laziness and reliance on convenience.
<h2>Taking Control: Your Action Plan Against Credential Stuffing</h2>
What can we, <a href="https://teampassword.com/features" rel="follow noopener" target="_blank">TeamPassword</a>, do about credential stuffing attacks? For you? Pretty much nothing, unless you meet us in the middle. Look what happened to&nbsp;<a href="https://techcrunch.com/2023/01/15/norton-lifelock-password-manager-data/?guccounter=1" rel="follow noopener" target="_blank">Norton LifeLock</a> or <a href="https://teampassword.com/blog/what-happened-during-nintendos-data-breach-in-2021" rel="follow noopener" target="_blank">Nintendo</a>. Sure, we have security controls in place on our service to protect you from what happened with those other companies, but does each of the 100 services you use have the same controls in place? Does each of these 100 services you use give you the option of MFA? And did you enable that MFA on all 100 services?
The only solution to this problem is for you to take responsibility away from the services you use, and into your own hands. Let go of the apple tree and get into a new habit, that looks like this:
<ol>
<li>Use a <a href="https://app.teampassword.com/signup" rel="follow noopener" target="_blank">password manager</a>.</li>
<li><a href="https://teampassword.com/password-generator" rel="follow noopener" target="_blank">Generate a random, strong password</a> for every service you use.&nbsp;</li>
<li>Turn on <a href="https://teampassword.com/blog/2fa-vs-mfa" rel="follow noopener" target="_blank">MFA</a> for every service you use.</li>
<li><a href="https://teampassword.com/blog/how-to-disable-your-browsers-built-in-password-manager#howtodisableyourbrowsersbuiltinpasswordmanager" rel="follow noopener" target="_blank">Turn off convenience tools</a> such as the &ldquo;remember this password&rdquo; feature of browsers and the &ldquo;stay signed in for 6 years&rdquo; checkboxes (ok that one is a joke, but you get the point).</li>
<li>Spend several minutes at the start of each work day signing in securely to everything. Not a big deal. If you follow these steps, you and the company you work for will be safe against Credential Stuffing attacks, and the only stuffing that you will need to worry about will be the turkey on Christmas day.</li>
</ol>
<h2>Conclusion</h2>
Here's the thing about cybersecurity: those data breaches and cyberattacks you read about? So many of them are preventable. But it's not just about what you do. We need to be like a rising tide, lifting all boats, making sure everyone's wise to the threats.
Why? Because a hacker only needs one open door. You might be on top of all the safety measures, but what about your team? Your family? Are they all doing their part?&nbsp;
Oh, and that friend with the &ldquo;appletree&rdquo; password. I once asked him how he came up with it. He told me: &ldquo;Oh, I copied the idea from another friend, they had an apple tree outside their house and told me they used it as their password&rdquo;. True story.&nbsp;

Still using "appletree" or "poochie726" for passwords? Learn why even "strong" reused passwords make you vulnerable to credential stuffing and how to truly secure your accounts.

Still using "appletree" or "poochie726" for passwords? Learn why even "strong" reused passwords make you vulnerable to credential ...

From Appletree to Anarchy: How Credential Stuffing Exploits Poor Password Hygiene

How Credential Stuffing Exploits Poor Password Hygiene

On April 18, 2025, South Korea's largest mobile carrier, SK Telecom (SKT), faced a significant cybersecurity incident. The company's core network was compromised in an attack that targeted its Home Subscriber Server (HSS), a central component managing subscriber data.
SKT later confirmed that the incident involved a "<a href="https://www.reuters.com/sustainability/boards-policy-regulation/sk-telecom-shares-plunge-after-data-breach-due-cyberattack-2025-04-28/#:~:text=SEOUL%2C%20April%2028%20%28Reuters%29%20,month%20caused%20by%20a%20cyberattack" rel="follow noopener" target="_blank">large-scale leak of data due to malware</a>" detected on the day of the attack. The compromised information included sensitive Universal Subscriber Identity Module (USIM) data &ndash; the data associated with SIM cards used by mobile subscribers. While SKT stated that personal names and financial account details were not exposed, the USIM data itself is critical for network authentication and services.
The scale of the breach was considerable, impacting a vast number of SKT's subscribers, estimated to be around 25 million &ndash; essentially their entire user base. The incident was quickly recognized as a major event in the history of Korean telecommunications, prompting significant concern. Following the announcement, SKT's stock experienced a decline.
In response, SKT issued a public apology, accepting responsibility for potential impacts on customers. They initiated immediate measures, offering free SIM card replacements and launching enhanced protection services for all users to mitigate potential risks.
Technical analysis provided more insight into the nature of the attack. Investigators believe sophisticated malware was used to infiltrate SKT's internal network. Security reports indicate that a malicious program was identified within SKT's systems on the night of April 19, 2025, prompting its immediate removal and isolation of affected equipment.
<h2 data-end="1173" data-start="1151">Technical Details of the SK Telecom Breach</h2>
Forensic examination by government agencies identified the intrusive software as multiple variants of a Linux backdoor known as BPFDoor. This type of malware is noted for its ability to remain hidden and has been associated in previous incidents with advanced persistent threat (APT) groups, suggesting a highly capable attacker.
The precise entry point used by the attackers is still under investigation, with some security experts suggesting a vulnerability in VPN or remote-access equipment may have been exploited. A joint SKT and government investigation is ongoing to fully understand the breach.
While there has been no confirmation of the stolen data being used maliciously so far, SKT proactively strengthened its fraud detection systems and expanded SIM-swap protections to prevent unauthorized porting of mobile numbers.
The SK Telecom incident highlights the persistent challenges in securing critical network infrastructure and the potential impact of sophisticated cyberattacks on a large scale. It underscores the need for continuous vigilance and robust security measures in the telecommunications sector.
<h2 data-end="2379" data-start="2352">Potential Perpetrators</h2>
No group immediately stepped forward to claim responsibility for the sophisticated infiltration, leaving investigators to piece together clues in the digital dust. Cybersecurity analysts quickly noted hallmarks suggesting a highly skilled, potentially state-sponsored actor. The appearance of the BPFDoor backdoor, a tool previously linked to hacking groups aligned with Chinese interests, became a focal point of speculation. Adding to this, reports from a Taiwanese security firm highlighted a pattern of China-linked advanced persistent threats (APTs) exploiting vulnerabilities in VPN software globally, including within the telecommunications sector &ndash; a potential parallel that fueled the ongoing inquiry. While South Korean authorities have remained cautious in official attribution, a comment from a Deputy Chair at the Personal Information Protection Commission hinted at a belief that the leak originated directly from SKT's main servers, seemingly pushing back against any suggestion otherwise. The focus of the government's investigation remains on pinpointing whether the breach stemmed from an insider threat or sophisticated external actors, and critically, whether SKT's security measures on its vital HSS servers were adequately robust.
<img src="https://cdn.buttercms.com/CDwgwk03ShqllTFsOZpS" alt="undefined" width="844" height="633">
<h2 data-end="3425" data-start="3402">Who is SK Telecom?</h2>
To understand the magnitude of this event, one must recognize SK Telecom's place in the fabric of South Korea. As the flagship wireless carrier and a key entity within the powerful SK Group, SKT isn't merely a mobile provider; it's a cornerstone of the nation's digital infrastructure. Commanding roughly half of the domestic mobile market, with a subscriber base of 23 to 25 million in a country of 50 million, SKT holds immense influence. The company has long been at the forefront of mobile technology, pioneering advancements from 3G to 5G, and its service portfolio extends across broadband, IoT, and digital media. As a publicly traded company with significant revenue, its operational health is tied to the national economy.
More crucially, SKT serves as a critical national asset, providing the underlying network capacity for smaller carriers and acting as a fundamental platform for countless financial and identity verification services that everyday citizens rely upon. In essence, SKT is South Korea's incumbent telecom giant, a figure comparable in its national significance to major carriers in other large economies.
<h2 data-end="4376" data-start="4356">Customer Impact - How are SK Telecom subscribers affected?&nbsp;</h2>
For the millions of SKT subscribers, the confirmed details of the breach brought a mix of relief and anxiety. SKT maintained that core personal identifiers like names, addresses, or financial data were not exposed.
However, attackers did obtain USIM-related information, including phone numbers and critical International Mobile Subscriber Identity (IMSI) values. This combination, while not granting direct access to bank accounts, is sufficient in theory to clone SIM cards or intercept those <a href="https://teampassword.com/blog/2fa-vs-mfa" rel="follow noopener" target="_blank">crucial two-factor authentication codes</a> sent via SMS that many services use. Encouragingly, IMEI device identifiers were reportedly not compromised, and SKT's investigation has, as of now, found no concrete evidence of the stolen data being misused. Nevertheless, the inherent risk of <a href="https://teampassword.com/blog/what-is-sim-swapping" rel="follow noopener" target="_blank">SIM-swap fraud</a>, a tactic where criminals take control of a victim's phone number to access accounts, was enough to generate significant concern among the customer base.
SKT responded by offering free SIM card replacements to all affected subscribers. The uptake was swift; within days, hundreds of thousands had swapped their cards, and millions more booked appointments online. However, the sheer scale of the user base quickly exposed a practical challenge: inventory shortages. Reports indicated SKT had a limited stock of spare SIMs and faced a scramble to procure millions more to meet demand. This logistical hurdle, coupled with the underlying anxiety, contributed to customer churn.
Media outlets highlighted that tens of thousands of subscribers opted to cancel or port their service to rival carriers in the immediate aftermath, a notable surge compared to previous months. While SKT's network and services generally remained operational, the company took the step of suspending new customer sign-ups while it focused on managing the crisis and reinforcing security. The breach undeniably eroded customer trust, creating widespread unease even without direct compromise of financial data or passwords.
<h2 data-end="6927" data-start="6892">Public and Government Response</h2>
The fallout from the SKT breach quickly escalated to the highest levels of government and public discourse. South Korea's Ministry of Science and ICT formally ordered SKT to halt new customer acquisitions at its retail locations until sufficient SIM card stock and enhanced protections were in place. SKT's CEO publicly acknowledged the severity, labeling it "the worst hacking case in telecom history" for the company and pledging a full effort to restore confidence. During a parliamentary hearing, the CEO faced sharp questions, confirming the date of the attack's detection and admitting to delays in officially notifying relevant authorities. The Acting President personally mandated a government review of SKT's handling of the incident within hours of it becoming public.
Government agencies mobilized to contain the fallout and bolster defenses. The Personal Information Protection Commission launched an investigation specifically to assess whether SKT had maintained adequate security safeguards on its USIM servers. Financial regulators convened meetings with banks and card issuers, issuing warnings and guidance on monitoring for potential SIM-swap fraud. Law enforcement and the National Assembly also became involved, assisting SKT in developing its SIM Protection service and signaling a potential push for stronger cybersecurity legislation. Public advisories were issued, cautioning citizens about circulating <a href="https://teampassword.com/blog/spear-phishing" rel="follow noopener" target="_blank">phishing scams</a> leveraging the incident, and SKT itself clarified how it would communicate official information to customers.
The incident garnered relentless media attention, both domestically and internationally, keeping the breach's scope and the need for preventative measures in the public eye. Social media became a hotbed of rumors, prompting SKT to publicly debunk false claims about stolen data being sold online. Beyond immediate technical responses, customer advocacy groups and lawmakers began exploring broader protections, including proposals to waive contract penalties for customers wishing to switch providers due to the breach. Meanwhile, some SKT subscribers took legal action, filing class-action lawsuits seeking compensation for the distress and inconvenience caused by the security failure.
<h2>Actions Steps to Protect Yourself from the Breach</h2>
Responding to a cybersecurity incident requires decisive action. For individuals affected by the SK Telecom data breach, experts and authorities advise implementing the following protective measures:
1. Secure Your SIM Card: The primary recommendation is to obtain a new SIM card. SK Telecom is providing free replacements for all affected subscribers. This can typically be arranged by making an appointment or visiting an SKT retail store or authorized kiosk. Replacing the physical SIM card invalidates the compromised authentication keys that were potentially exposed during the breach, thereby mitigating a key risk factor.
2. Activate SIM Protection Services: Regardless of whether you replace your physical SIM, it is strongly advised that all SKT customers enroll in the company's USIM Protection Service. This service functions by electronically binding your phone number to your current SIM card, creating a safeguard against unauthorized SIM porting or swapping attempts. Official statements indicate that this service offers a level of defense against illicit activity comparable to that of physically replacing the SIM. Enrollment is generally accessible through SKT's online platforms or their official mobile application.
3. Exercise Caution Regarding Unsolicited Communications: Be highly suspicious of unexpected text messages or emails that reference the SKT SIM replacement process or related security measures. SKT has issued warnings that fraudulent "smishing" (SMS phishing) and phishing attempts are likely circulating, attempting to exploit the situation. Legitimate notifications and instructions from SKT concerning this breach will be communicated through official, verified channels, such as messages originating from the designated service number (e.g., 114) or within the secure environment of the official SKT mobile application. Avoid clicking on links or sharing personal or SIM-related information in response to any unsolicited messages.
4. Reinforce Account Security: As a precautionary step, it is prudent to re-authenticate your login sessions for critical mobile applications, including banking, email, and any digital identity or authentication apps (such as the PASS app). Monitor your financial accounts diligently for any unusual or unexpected activity. Review and update <a href="https://teampassword.com/blog/ultimate-guide-to-password-security-teampassword" rel="follow noopener" target="_blank">passwords</a> for important online accounts. Where available, enable multi-factor authentication (MFA), prioritizing methods that do not rely on SMS delivery, such as <a href="https://teampassword.com/blog/best-authenticator-apps" rel="follow noopener" target="_blank">dedicated authenticator applications</a>, as SMS-based codes can potentially be intercepted in SIM-swap scenarios.
5. Consult Official Information Sources: Stay informed about the incident and ongoing protective measures by referring exclusively to official announcements from SK Telecom, available on their verified website and social media platforms, as well as reports from credible news organizations. Authorities may also establish dedicated hotlines or online resources to provide specific guidance and allow individuals to check if their account was directly affected. SKT and relevant government ministries are maintaining support channels and frequently asked questions sections to assist subscribers through the SIM replacement and protection enrollment processes.
Implementing these recommended actions will substantially reduce the risk of potential fraud or unauthorized access stemming from the breach. While the compromised data alone is not sufficient for immediate financial account depletion, replacing the SIM and enabling protective services significantly complicates attempts at unauthorized SIM-swap attacks. Maintaining vigilance against related social engineering tactics, such as criminals impersonating legitimate entities, remains essential.
<a href="https://koreajoongangdaily.joins.com/news/2025-05-02/business/industry/Text-messages-about-SIM-card-replacements-could-be-phishing-scams-SK-Telecom-warns/2299020" rel="follow noopener" target="_blank">SKT has emphasized that all authentic communications regarding SIM replacement during this period will originate solely from their official channels.</a>

SK Telecom hit by major cyberattack in April 2025, compromising USIM data for 25 million subscribers. Learn about the breach, its scale, and the potential impact on mobile users in South Korea.

SK Telecom hit by major cyberattack in April 2025, compromising USIM data for 25 million subscribers. Learn about ...

2025 SK Telecom Breach

One-time passwords (OTP) are a critical component of multi-factor authentication (MFA). Here’s how TOTP, HOTP, and OTP work.

TOTP vs. OTP vs. HOTP: What are they and which is most secure?

Find the best password management for your IT or MSP business. In-depth comparison of TeamPassword, Keeper Security, Bitwarden, Dashlane, & more for features, security, & pricing.

Find the best password management for your IT or MSP business. In-depth comparison of TeamPassword, Keeper Security, Bitwarden, ...

The Best Password Management Software for IT and MSPs

See the best way to come up with a new username. We break down types of usernames and give you the best username ideas out there.

See the best way to come up with a new username. We break down types of usernames, why ...

How to Make a Good Username | Create a Unique and Secure Username

See the best way to come up with a new username. We break down types of usernames, why secure usernames are important, and how to create them effectively!

Learn what to do if you forgot your Facebook password and how to use TeamPassword to make sure you never forget a password again.

Learn what to do if you forgot your Facebook password and how to use TeamPassword to make sure ...

What To Do If You Forgot Your Old Facebook Login

What To Do If You Forgot Your Old Facebook Login | TeamPassword

Dreaming of a flexible career where you set your own hours and work with clients from around the globe? The rise of the gig economy has made this dream a reality for countless professionals. From graphic designers to writers and developers, freelancers are reshaping the traditional workplace.
Over the last decade, the gig economy boom has allowed professionals worldwide to switch to freelancing and build a network of international clients.&nbsp;
According to Upwork, <a href="https://www.upwork.com/research/freelance-forward-2022" rel="follow noopener" target="_blank">freelancers contributed $1.35 trillion to the U.S. economy in annual earnings in 2022, up $50 billion from 2021</a>.&nbsp;Some of the most successful freelancers earn hundreds of thousands of dollars per year through platforms like Upwork, Freelancer, and Toptal.
But what does it take to become a top-earning freelancer? In this post, we'll examine 10 successful individuals who have built thriving careers in the freelance world. By examining their portfolios and successes, we hope to give you a better idea of what's possible in the freelance world, and inspire you to take the leap should you decide that freelance is the right choice for you!
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
Does your company hire freelancers? How do you <a href="https://teampassword.com/blog/should-i-share-data-with-freelancers" rel="follow noopener" target="_blank">share passwords with freelancers</a>? TeamPassword is an affordable password management solution for small businesses, startups, and agencies to share credentials securely with team members and freelancers. <a href="https://app.teampassword.com/signup" rel="follow noopener" target="_blank">Sign up for a 14-day free trial</a> today.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
<h2>10 Successful Freelancers</h2>
Here are ten successful freelancers and what they do. These freelancers have earned their place as experts in their given field with excellent track records&mdash;many have worked with the biggest companies in the world!
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>1. Scott Luscombe - Graphic Designer / Shopify Expert / Website Developer / Copywriter&nbsp; - Canada</h3>
Scott Luscombe is a freelance graphic designer, Shopify expert, website developer, and copywriter from Uxbridge, Canada. He holds a degree in Illustration from Sheridan College and a degree in Marketing from the University of Toronto.
Scott has been a freelancer for most of his professional career and has earned over $500k on Upwork. He has completed over 311 jobs and worked&nbsp;10,956 hours!&nbsp;
Scott's work includes graphic design and branding, illustration and icons, copywriting, website design and development, UX/UI, and printing and packaging. He also provides freelance coaching and consulting. Scott is a Top Rated Upwork Freelancer currently charging $99 per hour for various creative gigs.
Some of Scott's most notable work includes designs for Coca-Cola, the Canadian Cancer Society, Nickelodeon, and Wallet Ninja (to name a few).&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>2. Kathy Edens - Marketing Consultant / Freelance Copywriter - United States</h3>
<a href="https://www.upwork.com/freelancers/~016177d19f0624c1a7?viewMode=1" rel="nofollow noopener" target="_blank">Kathy Edens is a Top Rated Upwork Freelancer</a> with over $300k platform earnings! Kathy has been self-employed as a marketing consultant and freelance copywriter for almost ten years from her home in Ohio, United States.
She holds a Bachelor of Science in Professional Writing and Psychology from Oregon State University, which she says "...helps me understand how to reach your target audience with words."&nbsp;
Kathy has ghost-written several non-fiction books on various topics, including social entrepreneurship, healthcare, real estate investing, and the cannabis industry, to name a few.
Kathy also writes web content, sales pages, email marketing content, case studies, white papers, brochures, press releases, and more. Kathy's rates start at $86 per hour for her writing and marketing services.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
<h3>3. Koen van Oeveren - UX designer - Netherlands</h3>
Koen van Oeveren is a freelance UI &amp; UX designer from North Brabant, Netherlands, with almost ten years of experience. Koen works with several design agencies in the Netherlands, designing apps, websites, and eCommerce experiences for many international brands.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
Koen holds a Bachelor of Applied Science in Communication and Multimedia Design from Avans University in the Netherlands. Koen's <a href="https://www.koenvo.com/index.html" rel="nofollow noopener" target="_blank">portfolio website Koenvo</a> was nominated for a <a href="https://www.awwwards.com/sites/koenvo-ui-ux-portfolio" rel="nofollow noopener" target="_blank">2021 awwwards Award</a>.
<img src="https://cdn.buttercms.com/IOmtrbdOQZev1mS8Jc33" alt="undefined" width="650" height="433">&nbsp;Image by Freepik&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>4. Pascal Strasche - Product / UX designer - Germany</h3>
Pascal Strasche is a product and UX designer with more than ten years of design experience from Germany. He holds a Master of Arts in Interaction Design and a Bachelor of Arts in Graphic Design, both from HAWK University of Applied Sciences and Arts.
For almost a year over 2020/2021, Pascal worked as the sole product designer to design Con Cubo's SaaS tool that helps complex organizations visualize and manage teams. He's also worked with German steel giant XOM Materials to find product solutions to digitalize&nbsp;Germany's steel industry.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
In 2019, Pascal founded Product Design Resources, a growing archive of 800+ design resources, weekly updated for the design community.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>5. Paul Hunkin - Developer - New Zealand</h3>
Paul Hunkin is a freelance software consultant and developer from Tauranga, New Zealand, but currently living in Portugal.&nbsp;
Paul has over ten years of experience as a software developer with an impressive work history, including Google, NASA, InfoSys, and the Chinese aerospace industry leader COMAC.
He's worked with several early-stage startups designing everything from high-performance big-data systems to complex web applications to 3D rendering engines. He's also built a lot of the foundational code for independent games on Android.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
Paul is a Top Rated Upwork Freelancer with over $400k in platform earnings. His rates start at $120 per hour for software development. <a href="https://paulh.consulting/" rel="nofollow noopener" target="_blank">Check out Paul's website</a> for more about his impressive portfolio and work history.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>6. Jana Galat - Writer / Brand Strategist - Canada</h3>
Jana Galat is a freelance copywriter and brand strategist from Ontario, Canada. She holds a Bachelor's Degree in Management and Organizational Studies from King's University College and an Honors in Business Administration from Western University.
Jana has extensive experience writing landing pages, email campaigns, social media ads, and print materials and says, "I am obsessed with creating copy that sells..."
After several years of professional work experience, Jana went freelance in 2019 and has quickly built a reputation as a <a href="https://www.upwork.com/freelancers/~01bfa17a48301876dd" rel="nofollow noopener" target="_blank">Top Rated Upwork Freelancer</a> with over $70k in platform earnings. Jana's rates start at $100 per hour for copywriting and brand consulting.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>7. Kate H. - Logo Designer / Branding Expert - United States</h3>
Kate is a freelance professional logo designer and branding expert from Maryland, United States. Kate&nbsp;ran her own green wedding brand which she sold to mywedding.com in 2014, allowing her to focus on helping small&nbsp;businesses figure out what they want (and who they are) and translate that into design.
She holds a Master's degree in Environmental Management from Yale School of The Environment, and a J.D. in environmental law from Pace Law School.&nbsp;
Kate's skillset includes redesigning and updating material to make it easier to understand, building a consistent brand from a simple starting point like a logo, and creating unique logos that guarantee results.
Kate is a Top Rated Upwork Freelancer, and her rates start at $225 per hour. You can find out more about Kate on her <a href="https://www.upwork.com/freelancers/~013ce73876c1c18126" rel="nofollow noopener" target="_blank">Upwork profile</a>.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>8. Marcos Rezende - UX designer - Canada</h3>
Marcos Rezende is a UX Designer from Ontario, Canada, with more than 13 years of experience. Marcos has worked in over 30 industry sectors for multinational organizations in the United States, Canada, Germany, and Brazil.&nbsp;
Some of Marcos' notable projects include apps for Ontario's COVID-19 dashboard, Urban Master Planning collaboration platform, and Reaction (kid's e-learning app), to name a few.&nbsp;
Marcos loves sharing his industry expertise with aspiring UX designers and regularly writes for the popular UX publication Career Foundry. Total recognizes Marcos as part of its "Top 3%" of global freelancer talent&mdash;a title given to elite freelancers in their given field.
We don't have access to Marcos' rates, but the best UX designers on Upwork earn upwards of $100 per hour. As a Toptal Top 3% freelancer, Marcos likely charges $200-$300 per hour.
<a href="https://www.marcosrezende.com/" rel="nofollow noopener" target="_blank">Marcos Rezende's website</a> was nominated for the prestigious <a href="https://www.awwwards.com/sites/ux-portfolio-marcos-rezende" rel="nofollow noopener" target="_blank">awwwards.</a> in 2021.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>9. Tanya Litvinova - UX/UI Designer - United States</h3>
Tanya Litvinova is a freelance UX/UI designer from New York City, United States. She holds a Bachelor of Fine Arts in Advertising Design / Communication Design from the Fashion Institute of Technology.
Tanya specializes in product, mobile, and web design as well as user experience flow, research, and validation.
"I have a passion to make the complex simple, shape behavior, design, plan, and strategize. Aiming for the best user experience, all the while balancing the needs of business and technology to create engaging, habit-forming digital products."
Tanya has worked with Fortune 100 &amp; Fortune 500 companies and successfully delivered business-transforming data-driven analytics, responsive BI dashboards, enterprise web apps, and management systems. Some of Tanya's notable clients include KOCH Industries, BlackRock Financial, BCG Group, and FireEye, to name a few.
<a href="https://www.upwork.com/freelancers/~0165035041b26e96df" rel="follow noopener" target="_blank">Tanya is a Top Rated Upwork Freelancer</a> with more than $200k platform earnings. Her current rate starts at $162.50 per hour.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>10. Guangming Lang - Data Scientist - United States</h3>
Guangming Lang is a freelance data scientist from Michigan, United States. He holds a Bachelor of Arts in Mathematics from New College of Florida and a Master of Science in Biostatistics from the University of Michigan. Guangming has also completed several Coursera courses in data science and machine learning.
Guangming has been a freelancer since 2013 and has worked across several industries, including fintech, trading, medicine, biotech, advertising, and HR.&nbsp;
Guangming is a Top Rated Upwork Freelancer with over $400k in platform earnings. He's completed 216 jobs on Upwork totaling 3,805 hours! Guangming's current rates start at $200 per hour.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
<h2>Secure Freelancer Workflows With TeamPassword</h2>
No matter how talented or reputable the freelancers and contractors you hire, your company must use secure workflows to protect your digital assets.
Freelancers often need access to shared accounts and tools. Using a <a href="https://app.teampassword.com/signup" rel="follow noopener" target="_blank">password manager</a> is the first step to securing these accounts and platforms. You can also use a password manager to share credentials with employees, clients, and other stakeholders to ensure you never expose raw passwords via email, spreadsheets, chat apps, and other non-secure methods.
On the Enterprise plan, you can even <a href="https://teampassword.com/one-time-secret?navbar=onetimesecret" rel="follow noopener" target="_blank">share a one-time password link</a>.&nbsp;
<a href="https://teampassword.com/" rel="follow noopener" target="_blank">TeamPassword</a> lets you create groups to share access with only those who need it. When they're done, revoke access with a single click. No need to change passwords every time someone leaves the team.
If you do need to change a password, TeamPassword's built-in <a href="https://teampassword.com/password-generator" rel="follow noopener" target="_blank">password generator</a> lets you create secure passwords between 12-32 characters using numbers, letters (uppercase/lowercase), and symbols.
<img src="https://cdn.buttercms.com/tj8gEkSCTwiowMUAocHy" alt="Built-in password generator.gif" width="400" height="305"> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
Ready to onboard clients and freelancers securely with TeamPassword's robust password management solution? <a href="https://app.teampassword.com/signup" rel="follow noopener" target="_blank">Sign up for a free trial</a> to secure your company's digital assets today!

Here are ten successful freelancers and what they do. These freelancers have earned their place as experts in their given field.

Here are ten successful freelancers and what they do. These freelancers have earned their place as experts in ...

10 extremely successful freelancers and what they do

Here are ten successful freelancers and what they do. These freelancers have earned their place as experts in their given field with excellent track records—many have worked with the biggest companies in the world!

TeamPassword Blog

Browse our carefully created articles about Information Security, Password Management, Product Information, and Modern Business, all written with your team's safety and success in mind.

Most popular articles

Password Management

July 18, 2024 ∙ 6 min read

Top 5 Dangerous Ways to Store Your Passwords

How to Make a Good Username | Create a Unique and Secure Username

What To Do If You Forgot Your Old Facebook Login | TeamPassword

10 extremely successful freelancers and what they do

Business

May 12, 2025 ∙ 14 min read

6 Best Password Managers for the Trades (Electricians, Plumbers, HVAC, etc.)

Cybersecurity

May 11, 2025 ∙ 10 min read

What are the Types of Biometrics?

Cybersecurity

May 6, 2025 ∙ 5 min read

How Credential Stuffing Exploits Poor Password Hygiene

Cybersecurity

May 6, 2025 ∙ 10 min read

2025 SK Telecom Breach

Cybersecurity

April 30, 2025 ∙ 15 min read

TOTP vs. OTP vs. HOTP: What are they and which is most secure?

Business

April 21, 2025 ∙ 20 min read

The Best Password Management Software for IT and MSPs

The Password Manager for Teams

Product

Support

Channels

Legal