Password Security Best Practices

How can you keep your online accounts safe? Luke has a few tips to share...

Intro Screen Music Credit:
Title: Laszlo - Supernova

[steveozone]

Sometimes for fun when I'm at an ATM I like to shout out 4 random numbers when I enter my pin.

[seanmcmunn]

Password length limiters forcing to have only 10-12 characters at max with upper case, numbers, and symbols are the cancer of the internet

[Gehab]

Guys, what should I use instead of 69allday? ;(

[ZinxM]

The reason I like this channel so much is because whenever i watch a video i 99% of the time learn something new, and i find that so amazing. thanks Linus & the team.

[EdwarioERS]

"Don't Write Down Your Password."

This is pretty safe depending on the security situation of where you live. Most people don't have to be paranoid about documents in a dresser drawer or under their bed.

[TheUltraseal]

Fun thing is that yahoo just noticed me that someone in north korea just entered my account.

[StellaSteve]

I keep mine simple to remember it. I never forget Password123

[Silveretta]

Guys I just won a new iPhone 6S and all I had to do was send a Nigerian prince my bank account details!

[marceli-wac]

I literally loved the intro dialog beginning with the "If you want to see...", well played Luke!

[dragonshardz]

1Password isn't cloud-based, Luke. It, much like KeePass, has available Dropbox integration but doesn't store the actual database on a remote server. The password database (which is strongly encrypted) is stored locally. The primary differences between 1Password and KeePass are that 1Password has a more user-friendly UI but lacks Linux support while KeePass is a bit more utilitarian in the UI field but has a wider compatibility base.

[voEovove]

This is why I don't use the internet, or any technology for that matter. I am currently writing this comment on my iStone tablet.

[Pap]

talks about password protection then says:
"a trick i use to come up with password is..."
:D strill bro love luke

[DDT]

Better late than never that this finally arrived on YouTube, but I still say that this should have been posted here in the first place.

[GenerationVicez]

Would love to see more cybersecurity related videos like this. Very informative video!

[willhendrix]

The pass phrase is superior. You can even use concepts to help remember them. You can right down the concept as a reminder since someone would need to both know you very well and have the concept to crack it. An example of a concept is what I call topical favourites. So for example: Location - Car - Food, from this randomly I could have a password of dubaifordburger, sydneylancercheese or newyorknissancake. Both functional and comical making them easier to remember. 2-Factor authentication is based on a principle of both something you know coupled with something you have. So a password combined with a pin from an App, Text Message or RSA token makes this more viable. While someone could steal your phone or RSA token, chances are they won't have your password and vice versa. There is a TED talk on this exact topic if you want to know more.

I need to point out this won't work everyone. Some developers for whatever reason limit password character length, eg. Password must be between 6 and 12 characters in length. While this would help prevent SQL injection attacks, it is overzealous as proper input validation would prevent this.

[epicDuftbaum]

Why is physically writing down the password a bad idea?
As long as somebody doesn´t break into my house, they are safe. Family members do not even know that I have something like that and I won´t lose the sheets of paper since they are all stored in one place for years now.
Written down password cannot be stolen by some fancy hacking program. Using a password manager isn´t an option for me, I do not need it anyway and it can get decrypted too.
If you have all your passwords stored in a program, good luck getting to them if you PC is dead...

[gerrit]

Taran van Droogkloot and Taran van Eikel :D

[polmes]

1password can also be used for local storage (and local Wi-Fi sync, which is very useful)

[AL_O]

Techquickie: password security explained

[VeselinMarkovic]

A good video, and one I liked. Luke's at his best when he isn't imitating Linus and doing his own thing instead. Thumbs up! 👍