STOP using GMAIL (or make 5 security changes)

[@acts9531]

I was already doing all this but it never hurts to revisit things just to stay current on security. Great video -- short, concise, clear and good visual examples provided. No fluff, no crap, just solid information that everyone should know. Just one thing ... follow Matthew Kutoloski's advice on your mic. Some people watch YT videos on their phones, some of us use much more complicated equipment. I'm one of the latter.

[@TheYogina]

I like your security advice. In fact I think you're one of the best guys on here. You give practical advise with out going over the top.

[@BouncingCupCake-w8g]

i've recently been attacked by who knows who in the online world, and have been getting emails about suspicious people trying to sign in, or successfully signing into my accounts. i've had to outright shut down two accounts on different websites, and am going full blown max security on everything. its been annoying to deal with this new security stuff, but i feel safer and less vulnerable.

[@JenniferIsselPhilly]

It's the hackers in the Google cloud.

[@leecowell8165]

@@JenniferIsselPhilly Don't back ANYTHING to a server that you do not control. Google, Micropuke, Apple, Yahoo, doesn't matter. You want YOUR data to remain under only YOUR control. Unfortunately most of John Q do not possess backup skills because they have no way of retaining reliable back up data.

[@Joywith3LastNames]

Ditto that’s why I’m here to learn what to do.

[@silvalu80]

I’m here to learn as it’s really important.

[@1918]

hey! really good and educational video! incredibly useful for anyone. one crucial thing though; don't use your mobile phone number for 2FA or as a recovery method in general! whatever you do, don't do it! don't use your phone number as a recovery method anywhere on any platform at all! it allows for "sim-swapping" attacks to take place and be used to gain access to everything you use your phone number for. keep this in mind wherever you sign up! you should make a video about this and "sim-swapping" in general. ❤️

[@RayMondElec]

So want you are saying is use another sim. Which is only used for 2fa and nothing else?

[@MakeAstand5]

​@@RayMondElecNo. NEVER use sms as a two factor authentication option

[@liteknight]

​@@RayMondElecno because that Sim can still be Sim swapped.

[@sort407]

I am dealing with this now.

[@KevinMacGillivary-y9k]

I'm sorry I don't see the link for the 2fa keys?

[@nevigo5519]

I have tried it too. To be locked out is a PITA. So now I use a strong PW and 2FA. It's essential with a Google account. Thanks.

[@JenniferIsselPhilly]

They change the passwords and hack your email.

[@JDDees]

2FA does NOT increase your safety.... he's spreading MISINFORMATION!

[@dorkusmaximus3033]

Thanks!

[@AllThingsSecured]

Thanks for the support!!

[@JamesEmirzianWaldementer]

Thank you for listening about the scammers

[@AllThingsSecured]

Thanks for watching and commenting.

[@moosedancer1]

I recently found you channel and glad that I have. You have the ability to make sense from a basic user to an advance user.

[@matt_nyc_audioengineer]

Hey bud great video, thank you for the tips. I'll give you a tip in return. The mic you are using is meant to have the audio come in the front, not the top. So you would want to flip the mic up and speak into the front of the mic. Just make sure you are speaking into the front and not the back. Your audio will improve GREATLY if you do that. I'm a professional audio engineer so recording and mixing is my profession! Anyway, just a friendly tip. Thanks again for the video!

[@McMillanScottish]

You forgot to mention the pop screen. I thought my windows were gonna fall out.

[@matt_nyc_audioengineer]

@@McMillanScottish 🤣 Yes, a pop filter would certainly help too. The plosives were pretty bad in some spots.

[@tnekkralc8080]

Just to point out. I had zero issues with the audio in this video. Found absolutely no issue hearing/understanding everything he said. I think tips are fine. Just wanted to point out the quality was great 👍

[@matt_nyc_audioengineer]

@@tnekkralc8080 Noone is saying it wasn't. The audio quality is not great. Maybe to you, it sounds ok. There is nothing wrong with the audio the way it is tho. Never said there was. Did you even read the comment? I didn't criticize the man! I gave him a professional sound tip just like he is giving up professional tips. I was returning the favor. No one said anything like that. 🤦🏻‍♂

[@tnekkralc8080]

@@matt_nyc_audioengineer Okay. Thanks. You (and the other guy) heard things that I didn't hear. Not sure if you had your volume on blast or what. LoL. Great tips. Just try not to get offended when others leave feedback, TOO. LoL

[@rightpassage]

Fantastic!! A 2FA key is what I need. I was thinking that today. I forgot my password to my Nordpass. What a headache. Still waiting for them to contact me. Good thing I have biometrics on the phone. I've been wishing I had one on my laptop.😁

[@justchilling5448]

I don’t trust Google with my privacy, and definitely not with my emails. I have one anonymous Google account just for my KZbin, and a totally different anonymous account for Google maps, that’s it. Great channel by the way 👍🏼

[@kittin9018]

How did you get around the age restrictions on Google account if you haven't confirmed age through a card purchase etc please?....been limited to under 13 vids on KZbin because I won't provide a card to confirm ID?...have you had this issue too?😊

[@oscargluja426]

I just don't include any info on my cell regarding my economy and documents at all!

[@JenniferIsselPhilly]

Yes don't trust Google. They messed up our network here and we were robbed.

[@JDDees]

SAME HERE....

[@po_thecutepanda]

Which email do you give to your banks,etc then? I want to follow ur footsteps.

[@DireNeeds]

Thank You. I have made my way to my account's security page in the past. The video was a good reminder to do so again.

[@TheSeeking2know]

A good first step.

[@AllThingsSecured]

Great! Glad it was helpful.

[@pbilk]

A good video. Too many people have insecure Gmail accounts. I personally don't use Gmail. I was forced to use one for KZbin way back to comment on KZbin but if I could remove the connection to my hotmail account I would.

[@Ivan-cr3vc]

I have 2 email accounts for the Tube. They are never used for anything else. Only sent mail to them on the first day each was created. No traffic to search.

[@TNKHART]

Thank you Josh for all your content. It's made me see much of what I need to better protect including my Gmail. Much appreciated.

[@AllThingsSecured]

My pleasure, Tim! Thanks for watching and commenting.

[@Guillie641]

Change your GOVERMENT NAME TO A BOGUES AND FOR IMPORTANT ISSUES USE 10MIN EMAIL

[@FreedomDaddy]

Happy that I watched this video. Have long had my Yubikey and would never give them up.

[@erobos111]

I Always appreciate the easy to follow format & encouraging tone of your demeanor🙏🏾 If you were my teacher when I went to IT school, l would've actually learned something and had a career instead of getting jerked around for over 2ys!🤷🏾‍♂️🤦🏾‍♂️ The school wanted my program's money much more than they wanted to teach me😒🤑

[@AllThingsSecured]

Thanks for the kind words!

[@britneyherrera81]

I concur with this comment 🙃

[@ShadaeprincessCleanLikeABoss]

​​@@AllThingsSecured is the spring merch shopping for youtube having access to google account safe? Having 3rd party access

[@Whalebarf79]

Fudge. All new new info for me. Thanks for the info.

[@sugarpuddin]

2FA is vulnerable and this method give information to Google regarding your other devices; which it will now tie into its analysis of who and where you are, where you go, who you know, and all other issues Google should not be monitoring

[@Gfy69ytb]

Thank you. It had to be said.

[@kaltrex9465]

What’s the best alternative?

[@RolandoGarza]

I think that risks to privacy are something different than risks of account takeover. By using Firefox, you get a prompt that says "[service provider] is requesting extended information about your security key, which may effect your privacy. Firefox can anonymize this for you, but the website might decline this key." This can help mitigate leaking the certificate serial number in the metadata, IIRC. By using a security key you also practically eliminate the phishing risks. This is because the cryptographic response generated by the security key is only valid for the original domain associated with the account.

[@dimatall]

@@kaltrex9465proton mail?

[@alicias2915]

Thank you very much for all this very helpful , informative and great information.Your amazing. Thank you.

[@glenbarrington2634]

Thanks! I've been thinking about a 2FA physical key, and this has solidified my intent! Quick question, can one buy a fancy fingerprint 2Fa key as primary device and then use a cheaper device with fewer features as a backup? Also, must the 2 devices be from the same mfgr?

[@MarcoFlores-um7cj]

I really like how you explain your topics, other youtubers tend to be paranoid

[@AllThingsSecured]

Really appreciate that, Marco. I hope you stick around.

[@cryptosig283]

What do you do about wear and tear on the yubikey? If I kept it on my key chain, I’d image a year later it would fall apart or be gross. You should make a video on tips for transporting your yubikey on the go.

[@AllThingsSecured]

Interesting idea! I've had mine on my keychain for a couple years now and haven't had any problems. But again, I think that speaks to the importance of having a backup that ISN'T kept in your pocket and scratched up all the time :)

[@stevenhespelt7951]

I was concerned about the same issue - I use a "Cozy" USB-A cap > both it & the Yubikey are attached to the same small metal ring and the Cozy is flexible, fits snug on the male USB-A tab. So far, works great.

[@geraldlandis8818]

what you say is slick for an old man like myself. how do I know what you say is legitimate and you are not selling a service which will go away

[@geraldlandis8818]

We all have seen apps come and go away

[@jamesbrown8766]

Great information! I understand that these measures help secure my data from 3rd party access, but my only question is, do these steps prevent Google from accessing or using my information? I doubt it, yet they are arguably one of the most egregious offenders of data privacy.

[@AllThingsSecured]

No, Google still stores your data on their servers, even with 2FA. That's a separate issue altogether.

[@audreyboag7670]

Lots of XYZ-ers here helped by this because they already posess the required degree of proficiency. All greek to me, and will be to most elders. Probably time to unplug. Sorry to be cranky but completely overwhelmed by flying images, galloping speech, and internet jargon. Slowing it way down helped a little. On the bright side...thank you for no background music.😘

[@markstevens1729]

Hey, a YubiKey ad disguised as a security video. Very thinly disguised. Holy crap!

[@LAHarder7]

Yeah, and now that I watched it I'm getting dozens more suggested videos about how we're all gonna get hacked unless we use Yubikeys. Yubikey affiliate channels must be the latest money-making scheme.

[@markstevens1729]

@@LAHarder7 me too. The price of living by the algorithm.

[@executiverestorationllc8882]

Well done states David Snell. Great info.

[@patrykmaterla4808]

Great video, make next one about outlook emails security improvements please :)

[@AllThingsSecured]

Thanks for the suggestion!

[@ScoobySnax.]

I got hacked yesterday and miracuolously got my account back and I'm making sure it doesn't happen again.

[@mrpickles-hb6zx]

I need this because my parents are childish and "never wrong"

[@Neuromancer2112]

After losing access to my gmail account in 2018, I knew I had to move to 2FA. I tried sending a physical letter to Google telling them what happened (and that the automated system refused to recognize me for some reason), but never received a reply from them. I lost 13 YEARS worth of email, and unfortunately, a link to someone close to me. (This also made me realize I need a minimum of TWO ways to contact people I care about, and not just via email.) Tough way to be forced into using 2FA, but now it seems every service is using it anyway.

[@madcowusa4277]

Never trust these bastards. Never. And never follow their security advice. Ditch them and move on as they've already screwed you once.

[@thegenxradioshow1007]

The people at google have their noses in the air and just don't care about common people anymore...they're elites....now.

[@PoseyLane]

Would you update his video? Does YubiKey not work with Google? At this point - two years from the making of this video - is it a problem to use a phone number and fingerprint for 2FA-can they be stolen? Please make an updated video on security at home for non-IT people.***I don’t want to hear from IT folks who fear monger or go on rants** I would like an updated video from the person who made it. ❤

[@ringstaffclaudine45]

Yes they got my information and using it

[@Psartz]

Today randomly clicked on locate my device.when opened realized there three other phones and tablets which I never owned...

[@thegenxradioshow1007]

spooky...

[@Jaymac0929]

Great Information i will check this out Thank You.

[@AllThingsSecured]

Glad it was helpful, Jay.

[@dr.maazasif5424]

Very informative and helpful video. Thank you. 👍

[@analyzeit2622]

Correct. RIGHT NOW!!! We all never should have opened accounts on evil platforms in the first place, but that's a longer fix and you'll have to look that up elsewhere. (Find an explanation of this sentence, and learn about who said it: {To understand the concept, you should think of “free” as in “free speech,” not as in “free beer.”} Your treasure hunt begins right after you make the stopgap temporary fix from this video.)

[@ikust007]

I sincerely love your channel

[@AllThingsSecured]

Thanks so much!

[@muthukrishnan3045]

Thank you josh You sent this video on gmail 😅

[@AllThingsSecured]

My pleasure, Muthu.

[@muthukrishnan3045]

@@AllThingsSecured 🥰

[@latitamontoya]

thanks for the info could you tell me what is the difference between 2FA key and USB-C

[@AllThingsSecured]

Two different things. A 2FA key can be USB-A, USB-C or even Lightning (iPhone). It’s just the type of connection.

[@johnmoreno4212]

Thanks a million for this info!! ❤❤❤

[@tusshaarpatil]

Your content is simply amazing. I would just want to ask you that is there any contacts app or something like that where we can sync and store our contacts on any cloud or something as currently we save our contacts on google which immediately syncs it to all devices. This would be a great work around to de-google ourselves.

[@AllThingsSecured]

You can do that with Proton. They offer a great suite of services to replace Google, including both email and contacts (which sync between devices).

[@BillyPilgrim-ds9cv]

Really helpful and well explained - thanks

[@Jalan_Ilmu5]

For proton mail. Theres change about their privacy and policy. What do you think about it ?

[@AllThingsSecured]

I'm still using them because of the zero-knowledge structure of the data, but as with all things, it's a personal decision.

[@jessicasmith4388]

Josh, My partner lives on her iphone and she refuses to use a password manager or any 2FA her reason is she doesn't want to complicate her life. Is there anything that can protect her phone but yet be simple. I believe she feels that there is no need for all this protection as it just complicates your life. She has access to one of my accounts and I had to change the password to something simple so she could remember it. Thanks for your help Jessica

[@maxguod]

Apparently Josh does not talk to lesbians -

[@Orangesjesus]

He did mention a key..

[@mitchellquartero]

Thanks I use two factor on all my accounts and I constantly changing security updates every 5-6 months and I use a password manager

[@wingandhog]

Good suggestions. I have been wanting to grab a two-pack of Yubi’s and will use the discount. I also subbed

[@AllThingsSecured]

Great! Glad to hear it 👍🏻

[@malikmps]

great service video. Do these keys work with Thunderbird? It is my preferred email client.

[@teresaweaver6609]

How much did you pay for your yubikey? How much is the actual cost? Thank you

[@AllThingsSecured]

Yubikeys cost anywhere from $25 (Security Key Series) to about $50 (5 Series).

[@Kenleaty]

What's the best security anti software / mal ware for Android. Thanks. Also why yubikey over Google key

[@neils5313]

Thank you Sir 🙏

[@erickmcgraw]

Just ordered my YubiKey 5 for my Google 2AF

[@AllThingsSecured]

Awesome! Glad to hear it Erick.

[@JustAnotherYou2ber]

Is it slightly better to use ProtonMail vs Google or Outlook, or heck of a lot better?

[@ikust007]

Mate : show us how to use Yubico keys to generate passwords please . Also how do we make a backup of the keys? I think you made a video about it …?

[@AllThingsSecured]

You can see my full setup video here: kzbin.info/www/bejne/nKu4h6WwZc6rpJo As for backups, and I think I reference this in the video linked above, I recommend setting up your backup key at the same time you setup your primary, and then putting that backup key in a different, secure location.

[@ikust007]

@@AllThingsSecured cheers !!

[@abdaleali609]

Appreciate for ur hard working, can you plz tell me if it's risk to use enhanced safe browsing for my security chrome.

[@pedroblanco8311]

Hi Josh, I'm considering the final step in your helpful video. Do you know how many keys I can program for the Google Advanced Security Plan? When I went to sign up, it seemed to default to two, however I have more. Thanks for advising.

[@peves-]

2FA isn't security either. I have had my paypal hacked right around 2FA. Someone used a man in the middle attack and got straight in. It's an extra hurdle to get around but people can get around it. It's better to have it than not, but don't think it's the be all and end all of security.

[@Mavrik9000]

Nice ad for the keys. You didn't explain how you would regain access if you lost the key? 🤷‍♂

[@CTX27]

Keep a back up key at a different location.

[@turtle.trek.2023]

All they have to do is use the built-in security on the phone itself. Like the fingerprint reader.

[@Risingabovechaos]

Excellent video my account is now as secure as it can be big thanks

[@AllThingsSecured]

Glad you enjoyed it!

[@ToubaYouness]

what is the difference among these different Yubicos ? NFC and CNFc Yubico, 5cNFC

[@thatcrazytoaster]

I still dont get the FIDO thing on the yubi key set up. so confusing.

[@steaphan6959]

I don't agree that 2FA makes your email more secure. In fact, all they have to do is get your phones IM number and use your phone to access email. If it's on your phone.

[@MikeWyattmodel48]

Thanks very clear and precise

[@AllThingsSecured]

Glad it was helpful!

[@kennethng8346]

Can you talk about the yubikey primary and backup? Is it just two yubikeys set up independently or do. you do something to copy the contents of the primary onto the backup? I like the idea of yubikey but am afraid of losing it.

[@PracticeMakePerfectMuslim93]

thanks mate great tip❤

[@timobrien842]

Is Yubico Yubikey the same brand, and how durable are these? Does a little dirt or dropping them on counter cause any issues?

[@AllThingsSecured]

Same brand and absolutely durable.

[@jaeminkim7406]

Brother once I put yubi... All bad email stop.. wow good

[@Charles_Carpenter]

Awesome vid! I was going to buy the Yubikeys but the coupon is no longer valid 😞

[@pgree6176]

I can feel your pain Geoff

[@johnseddon7793]

What about facial recognition? Thank you.🙏

[@lockbert99]

1/21/2024 It looked like Google does not offer 2FA via an authenticator app as it only showed [text message, security key, other device prompt] as choices, but after setting "other device prompt" it let me do text message as a secondary backup and then gave authenticator app (they wanted it to be their own but Authy worked) as another secondary verification. Don't know why they don't give it as one of the initial choices.

[@BlueElwood]

Love yubikey! I dont ever worry about my account being hacked

[@AllThingsSecured]

I’m glad to hear you use it!

[@lacyreeves8304]

so good, I just wish you didn't talk so fast and had better visuals so we could follow everything step by step

[@AllThingsSecured]

Sorry 😞

[@BoulevardH]

Yeah but my mom was Grace just 4 more houses away! Im going to eonder if you knew that before I did because I'm new to this. Do you try to make a courtesy call to fix what you did wrong where driving Japan into it?

[@Timberius]

I'm too worried about a hardware failure of a key, to entrust everything to it. If it fails, just like some USB memory sticks rarely but sometimes fail, I'm screwed.

[@GosWardHen98]

Using 2 factor authentication is probably the best option for ordinary users. Remember, if you use a smartphone, please do this first before you switch to it & or have a new number. Change this before you switch to the newer number & get a codd sent to this or your email, if its easier. You could get locked out & if your partner is happy to use theirs as a back up, the choice to 2 FA will pop up on the screen. It'll be a nightmare otherwise, because it happened to me & my back ups weren't current... 😮

[@ThePuppetMasterDj]

I'm just extremely concerned as to what it says in the DUO description regarding security, it actually says in clear text that users that use DUO have ZERO TRUST!? That seems a little bit concerning if you ask me which I'm going to bet you definitely won't be, but it all seems very fishy to me, punn intended.

[@GrahamIvanClark-s9g]

Useful information

[@Anthony-pw5gu]

T thank you for this video very helpful 👍

[@wordupup7155]

That Voice

[@arnimkrause5696]

Using a 2FA key gives google more info about you your finger print. Just what I want to do is give google more info about me? Not happening!

[@corettagreene1707]

Thank you so much ❤

[@AllThingsSecured]

You're welcome 😊

[@rvvanlife7077]

thanks

[@cniastilleros43987]

Thank you .

[@LK-bz9sk]

Really succinct and helpful information. Thanks so much.

[@AllThingsSecured]

Glad it was helpful!

[@Waltaere]

Lols i already watched so much of your videos that i decideds to just subscribes 🤪

[@matheusgoncalves6246]

Excellent and straightforward video!

[@AllThingsSecured]

I appreciate it, Matheus!

[@DJ_Driven]

I just purchased 2 new USB-C/NFC Titan security keys. Do you have a video showing recommended setup using these keys?

[@AllThingsSecured]

Here’s what I’ve done: kzbin.info/www/bejne/nKu4h6WwZc6rpJo

[@DJ_Driven]

@@AllThingsSecured looking for a specific video on the Google Titan keys.

[@Ken_829]

Thank you

[@AllThingsSecured]

You're welcome

[@TheYeowyap]

Seems like Google prompt will be alwasy the default even if you enable 2FA with authenticator app. Any workaround?

[@AllThingsSecured]

Hey guys, one great way to support this channel (and improve your own security) is to grab a 2FA key from Yubico, the sponsor of this video. Find the right key for you: geni.us/yubico-store

[@person-fy8kd]

I have 3 yubikeys. I could tell you my google account password and you still couldn't break in to it.

[@justmeunm8]

Hello all things thank you for this information because I get hacked all the time which one of the 2FA Do you recommend on Amazon thank you in advance

[@blueplanet36]

Good PROGRAMME sir

[@sweetslasherart]

Hey there..thanks for the vid. Just want to ask how can I cancel my storage. I couldn't access my account anymore. Even phone verifications and alternate emails dont work. I don't want google to kwep on charging me. Thanks so much.

[@jorgehenao3900]

hi from cali colombia nice video ..can you give your opinion about k9 k16 etc feitian keys ..thanks

[@r.mercado9737]

Thank you. Question. How secure is the Norton VPN? How protected is my computer? Can anyone hack into my computer using the NORTON VPN?

[@michaellane1316]

Everything is unsafe.

[@Isaiah_SJK]

What if you connect your pc (with non-essential data) to a public wifi but hotshot to your phone. Will you still be vulnerable to hack attacks on you data from your phones?

[@Kenleaty]

So if a buddy is at your house and sees your key in the front room on the table and as a joke knows your email and logs in on their phone...without telling you.

[@lolathedog3108]

If Yubico is so great how come they make Americans agree to Binding Arbitration?

[@ericphantri96734]

It is not about money but about social networking and access