Website to check for account hacks

I heard about this website yesterday while listening to a podcast.

https://haveibeenpwned.com/

It is a site that keeps track of some "major" data breaches from some major companies, and it will tell  you if your username or e-mail address has been hacked.

How to use the site:

It's a pretty simple site, to check if any of your accounts have been hacked.
(some websites give you a "username" some have you use an "e-mail address" as your username)

You just put your username in the box and click the button.

And then you get your results

If you are like me, you have a lot of different usernames and e-mail accounts that you have used throughout the years.

So, it is definitely a good idea to search for all your different usernames and e-mails.

What to do if they find a breach?

What this means is that your account information for that specific site (it lists all the sites that information was taken from) has been taken.  You should go to that account and change your password ASAP.

Where this could become a BIG PROBLEM is if you are a person who uses the same password for the majority of your accounts.  The hackers would now have your password for all the possible sites that you use that particular username/e-mail address with.

A word of caution

This website does not have a comprehensive listing of all the possible data breaches.  You could certainly get the "Good news - no pwnage found!" message, and some of your accounts could still have had a data breach.  It is just a tool to see that if some of the major/well known data breaches have reached any of your accounts.

Best Practices

1. Use different passwords and credentials for every online account you have. (That way if there is a data breach it will only affect that one account.)
2. The most effective passwords are random numbers, letters and symbols.
1. Do NOT use your kids names
2. Do NOT use your last name or Maiden name.
3. Do NOT use anything that can be tracked to you, like your phone number, city, school attended, workplace, etc, etc...
4. EXAMPLE:  g8xSy2Ji - would be an EXCELLENT password. It is completely random, and connects back to nothing.
3. How to remember your passwords?
1. I would recommend using a "password manager", such as LastPass.
1. A password manager is a software application or hardware that helps a user store and organize passwords. Password managers usually store passwords encrypted, requiring the user to create a master password: a single, ideally very strong password which grants the user access to their entire password database.
2. Here is an article on Password Managers, for more information
2. If you don't want to use a Password Manager some ideas?
1. Use a "base group" of random numbers letters  "g8xSy2Ji"
2. Then, for each website make a Subtle Change...
1. Examples:
2. For Google:  g8xSy2JiG
3. For Facebook:  g8xSy2JiF
4. For Banking: Bg8xSy2Ji
5. For Yahoo: Yg8xSy2Ji
4. In addition... you should Change Your Passwords Every Year!  - just like the K12 data Center has us do with our K12 credentials.  I know it's a pain, but it's a good practice.
5. Even if you follow ALL of these suggestions... it's possible that a hacker could cause a data breach of a site and steal your current data.  Which is why you should stay active in following the best practices.

I hope this doesn't scare anyone... it is meant to be informative, and hopefully serves as a reminder to stay vigilant in protecting your accounts and data!

Tuesday Teacher Tip: LastPass

How many websites do you have to remember passwords for?

As a teacher, I would assume most of you would have:
State e-mail
Infinite Campus
SD STARS

at the very minimum.

Of course then you have(possibly):

•  your personal e-mail accounts (google, yahoo, microsoft....etc, etc) 
•  online banking account information 
• Social Networking accounts (Facebook, Twitter, Pinterest)
• Paypal account
• Youtube
• Photosharing sites
• Shopping sites (amazon, ebay, etc...)
• Fantasy Football or baseball 

Well, then you need to have a password for each of those accounts.  AND, although most people do it...you should NOT have duplicate passwords (using the same password for everything).

You should have an original and creative password for every account you have.

But who can remember 10-20 separate, original, unique passwords?

This is where LastPass comes in.

LastPass is an online Password Manager that basically stores all your passwords for all your websites.

For more information how it works:  Read this LINK

I think a key point to remember here, is that LastPass uses encryption technology on your local computer, so that even they won't know what your password is.  It's encrypted before it's sent out to them.

If you are wondering if a program like this is right for you... consider this information I "snipped" from their webpage.

The frightening part there for me, is that it only takes about 3 minutes to crack the average password.  

-However, don't get too worried about that...remember that MOST people have simple and easy passwords to hack, like: their last name, their maiden name, their kids name, the word "password"....by simply using capital letters, and adding a number...you strengthen your password greatly.

What a site like LastPass can do is actually pretty impressive.

1. It remembers your passwords, so all you need to remember is ONE Password, to log in to LastPass.
2. It allows you to "strengthen" all your passwords!  No more using the same thing for multiple sites!  You can make ALL your passwords, difficult and strong.
3. LastPass has settings that will allow you to use different accounts for the same site...for Example, Infinite Campus.  Many people have Staff logins for Campus, but also parent logins for Parent Portal.  LastPass
4. LastPass will allow you to "automatically" log in to certain sites...so once you log in to your LastPass account...you click on a link to go somewhere, and it will automatically log you in, if you have chosen to do so.

LastPass is available for free.  Why?  Well, they offer use of a "premium" package, which offers more features, and better protection, and "unlimited" use of their mobile apps.  (Yep, they will protect your phone too, if you are willing to pay).

LastPass looks like an interesting product, and definitely something that the average computer user should look into using.

Hope this is something that can be used, and also, hope this is something that you can spread to other people...who couldn't use a bit more security in their "online presence"?

Today's Music Video:  Though I'd reach back to my college days, and break out a little Social Distortion.

Have a great week everyone!