Please, don't use personal information in you passwords. This information is way easier to get than you might think. Use a password manager and generate them randomly, that's the only way you can assure that your passwords are safe
There are hundreds of sites: for low level sites a hash password like he describes is a good option, for higher security use truly random numbers that you cant remember in a password manager, and use key based 2fa for that password manager and the sites that support key based 2fa
but if a password was leaked somewhere, then hackers could easily reverse engineer your password to know all the other ones. the chances that one of your passwords was already hacked are very high. if 2 of your passwords are hacked. if 2 of them were hacked then you it will be even easier to find the other passwords.
Man, it,s almost uncanny: I’ve been thinking about getting a YubiKey for a few days and here I see a video by one of my favorite channels about - exactly that! Thanks a lot again for making those awesome and informational videos!
I would get the Yubikey but it seriously needs a waterproof cover to be any use to me. I don’t get why they wouldn’t have that, even my cheap fountain pen has a waterproof snap cap.
@@SsShadowbaneSsS Yeah she did in a previous video and there were a handful of people saying how beautiful her eyes are. I'd go back to hiding them too if anyone were like that to me
@ 6:13 FYI - The problem I ran into with this again is google documentation, and removing a device google thinks you still have after you have sold it, swapped it out (Warrenty claim) or lost it. Even using a soft token google sometimes asks for a second verification in addition and thinks I still own my iPad Pro that I sold.
trying to memorise your passwords for dozens of sites and applications is a bad idea, and using a formula to create mnemonic passwords is not very safe. Far better to use random passwords from a password generator, and keep them in a password safe, then you only need remember the password to the password safe.
The Google’s new 2FA approach (asking you to confirm yourself from another device) is terrible: 1) it cannot be disabled 2) if you phone is stolen you have lost your Google account 2FA. Even UA-cam app acts as a 2FA now, and you cannot do anything with it. Also I have UA-cam under my account on my daughter’s iPad, if it is lost, my Google account is exposed.
I'm not 100% sure, but I think there is a way in which you can go to your security settings on your Google account and it generates about 8 or 10 sequence of numbers (keys) as an 2FA. You can print it or save it and keep in somewhere to use it whenever you can't use the other method you mentioned. Each of these keys can be used only one time and I think you can generate new ones if you use all of the previous. Facebook have (or had) this same method.
Great tips. I like the password algorithm you use, but have you ever ran into a scenario when the service forces you to change your password and sees that your new password is to similar to your old one and refuses it? Most of the time it will just realize the “(numbers) device name (special character) number” and refuse unless you rearrange it, but that will break your consistency across all platforms then.
Objectively password length is important *almost* above all else. The most garbage looking password is practically useless if it's only 8 characters. It's important to remember that passwords aren't guessed through login attempts (easily rate limited by the service provider) but instead leaked databases are hammered with millions of password permutations per second. - If your password is in that database and the company didn't take proper security measures, the only thing that matters is length. Also, don't forget, we're still on an exponential computing power curve. So just because your 16-20 character password cannot be brute forced today, doesn't mean it safe from the computers of tomorrow.
Can you please do a hardware durability test with these?! I am reading all over online that (at least the Yubikeys) are water/crush resistant but I can't find a single video testing this theory. It would be a great science experiment and I'd buy one through your Amazon link if you did :) LOL 🤣
I can tell you for three years now I have carried a yubikey for work and use it probably 15 - 20 times a day. Its held up like a champ so far, definitely looks used but works as well as the day I got it
Could you please review the mous 4.0 case? For the iphone 12 pro max... i wanted to know if it is better or worse than the 3.0.. will appreciate it a-lot thank you!
Let me make sure I understand this. You made a video to give other people, security advice, and then at the end of the video you told us that you trust safari browser with all your passwords instead of at least using a separate password service? Do I understand this correctly?
Good vibe and I like the production values of your videos. Question: would using this kind of physical key work in conjunction with a password manager, as an extra level of protection?
Hey! I dont know if you will see this but I love your videos and I have one question! Will the Flo lab series 6 Apple Watch screen protector work with the Rhino Shield CrashGuard case?
Have you guys considered getting sponsored content unrelated to tech and the products you review? I feel like in the current YT landscape there’s really nothing wrong with sponsored content but I understand if it’s not something you want to explore as a USP of your channel.
Hey sorry this is off topic I looked through your videos and can't find anything. On your left wrist what's that opposite of the Apple Watch on the inside of your wrist? Thanks!
My passwords are at least 48 character long and no I don't type them. I hate some services still forcing us to use passwords no longer than 8 character. E i g h t fcking characters come on.... Arghh
I enjoyed the video, but to have a truly well rounded review of hardware authentication devices, you need at least one open source product, because for some, closed source products are not an option. The connector also seems arbitrary (besides NFC), there are adapters you can buy for under 10$ for every connector.
bro sorry, but you don't need internet for TOTP, that's why it's totp with basic servers you need a connection to the internet to set i up and then you are free to go And device that generates that totps is even better than hardware key, because it's harder to extract something from software than hardware.
@@Erickchicas dude they are not a couple, he already has a wife and she already has a husband. In his previous videos he mentioned it. Even if they're a couple which they aren't, why is it a big deal to you?
I'm trying to figure out HOW this is a review... Basically listing the product with little background on the company. Nothing on durability of use. No OSS. Waste of time.
I’m hearing all this vibe about these keys. This is all new to this 78 year old fart here. Instead of show me what keys are out there, can you explain where and when I would use one. Somewhere I read that the only time I would use a key would be to enter into my Apple account. Is that all they do? You talk about using a key to replace a password. I have something like over 100 various passwords. Does one key replace all these passwords or is it only a place to back them up like backing up your pictures on a hard drive? Sorry about all these crazy questions. But, that’s how one learns.
I used to work a customer server job and told my customer always if you create a new password due to hacked account at our service. If you always use the same password like: monty2008 do this instead : monty2008_FB for Facebook Monty2008_Twt for Twitter. Then at least the hacker can’t just copy and paste your password and adding a extra special character and 2 or 3 letter make it way harder and cost more time to hack it.
The password creation recipe is unsafe advice, please please please don’t do this. It’s only slightly better than using the exact same password. If any of the services you use suffer data loss the only thing keeping all your other accounts safe is hoping that someone can’t figure out your rules (and they absolutely can if they want to)
1. Really wish this video wasn't so focused on iOS devices. I'd like to know how well the yubikey works with Android and this video didn't touch on that at all. 2. The password generation advice is terrible advice. Use a password manager.
You should have at the least checked which are opensource and have been peer reviewed - unless your intention was to sell crap filled with built in back doors and spyware...
Can you please help me! My Facebook and Instagram have been hacked and I have just received my Thetis key and don’t know how to use it to unlock my account please help me or my Facebook will be deleted November 18th!!!
Please, don't use personal information in you passwords. This information is way easier to get than you might think. Use a password manager and generate them randomly, that's the only way you can assure that your passwords are safe
There are hundreds of sites: for low level sites a hash password like he describes is a good option, for higher security use truly random numbers that you cant remember in a password manager, and use key based 2fa for that password manager and the sites that support key based 2fa
Let’s vote for sunglasses free reviews. 😎
Use a random password generated by a password manager or use unique long text phrases (don’t quote books, movies, tv shows, etc).
Excellent content! And TY for not selling these keys and just getting to nitty gritty of the critical details.
but if a password was leaked somewhere, then hackers could easily reverse engineer your password to know all the other ones. the chances that one of your passwords was already hacked are very high. if 2 of your passwords are hacked. if 2 of them were hacked then you it will be even easier to find the other passwords.
Unless you’re a high value target an Authenticator and password manager that can generate passwords is all you need
The last part: USE THE PASSWORD MANAGER, don't follow the tip in the video for password
Video’s incomplete without monty
He’s in the corner
Your reviews always help me decide what to do or what to buy. Well done. I'm a fan!
if each one is different it would be nice to have a way to remember which one is for which.
No Monty, no thumbs up. That's the law.
He’s in the corner
When I make a password I simply press every key on the keyboard or let my brother do it as he usually loves to mess stuff up on my laptop
Love watching these videos with Val in them! 😍
Man, it,s almost uncanny:
I’ve been thinking about getting a YubiKey for a few days and here I see a video by one of my favorite channels about - exactly that!
Thanks a lot again for making those awesome and informational videos!
I would get the Yubikey but it seriously needs a waterproof cover to be any use to me. I don’t get why they wouldn’t have that, even my cheap fountain pen has a waterproof snap cap.
Why does Val always wear sunglasses indoors?
If I'm to guess it's because people always make creepy remarks about her
@@lyric668 has she ever shown her face before?
@@SsShadowbaneSsS Yeah she did in a previous video and there were a handful of people saying how beautiful her eyes are. I'd go back to hiding them too if anyone were like that to me
@@lyric668 OMG people were saying her eyes are beautiful??? THOSE ANIMALS!!!
@@chadh6855 fyi, he has shown her face in past videos before. This is what happens when you speculate without research.
@ 6:13 FYI - The problem I ran into with this again is google documentation, and removing a device google thinks you still have after you have sold it, swapped it out (Warrenty claim) or lost it. Even using a soft token google sometimes asks for a second verification in addition and thinks I still own my iPad Pro that I sold.
Love this show, where can I purchase extra long apple series 6 straps please?
trying to memorise your passwords for dozens of sites and applications is a bad idea, and using a formula to create mnemonic passwords is not very safe. Far better to use random passwords from a password generator, and keep them in a password safe, then you only need remember the password to the password safe.
The Google’s new 2FA approach (asking you to confirm yourself from another device) is terrible: 1) it cannot be disabled 2) if you phone is stolen you have lost your Google account 2FA. Even UA-cam app acts as a 2FA now, and you cannot do anything with it. Also I have UA-cam under my account on my daughter’s iPad, if it is lost, my Google account is exposed.
I'm not 100% sure, but I think there is a way in which you can go to your security settings on your Google account and it generates about 8 or 10 sequence of numbers (keys) as an 2FA. You can print it or save it and keep in somewhere to use it whenever you can't use the other method you mentioned. Each of these keys can be used only one time and I think you can generate new ones if you use all of the previous. Facebook have (or had) this same method.
Amazing Video, I Really Enjoyed It, Thanks For The Heads Up On Creating Passwords. Thanks Again
7:45 can’t you set up a shortcut/automation to counter act this particular obstacle or nuisance?
Great tips. I like the password algorithm you use, but have you ever ran into a scenario when the service forces you to change your password and sees that your new password is to similar to your old one and refuses it? Most of the time it will just realize the
“(numbers) device name (special character) number”
and refuse unless you rearrange it, but that will break your consistency across all platforms then.
If the authenticator app is tied to your phone and you phone is lost or stolen, or dead battery how can you access your accounts with out the 2FA key?
Objectively password length is important *almost* above all else. The most garbage looking password is practically useless if it's only 8 characters.
It's important to remember that passwords aren't guessed through login attempts (easily rate limited by the service provider) but instead leaked databases are hammered with millions of password permutations per second. - If your password is in that database and the company didn't take proper security measures, the only thing that matters is length.
Also, don't forget, we're still on an exponential computing power curve. So just because your 16-20 character password cannot be brute forced today, doesn't mean it safe from the computers of tomorrow.
Val has such a beautiful smile!😃
She’s got Supersaf styling going. Nothing wrong with that.
Can you please do a hardware durability test with these?! I am reading all over online that (at least the Yubikeys) are water/crush resistant but I can't find a single video testing this theory. It would be a great science experiment and I'd buy one through your Amazon link if you did :) LOL 🤣
I can tell you for three years now I have carried a yubikey for work and use it probably 15 - 20 times a day. Its held up like a champ so far, definitely looks used but works as well as the day I got it
Super cute dog!
Get a password manager. Don't make up a system:)
If you aren’t self hosting a password manager theirs no point
they need to make the nano yubi key be able to stay pluged in and still be able to charge your phone!...to make it practical
Could you use titan security keys on a microsoft account? Thanks in advanced!
I just use a password manager for my passwords. I don't have a secret key.
Could you please review the mous 4.0 case? For the iphone 12 pro max... i wanted to know if it is better or worse than the 3.0.. will appreciate it a-lot thank you!
You guys are cool!!! Does Val wear shades indoor all the time?????;)
Let me make sure I understand this. You made a video to give other people, security advice, and then at the end of the video you told us that you trust safari browser with all your passwords instead of at least using a separate password service? Do I understand this correctly?
add a few spaces in your password as well
I still use Safari Password Manager 🤔
Dig it. I train staff on this stuff all the time.
Good vibe and I like the production values of your videos. Question: would using this kind of physical key work in conjunction with a password manager, as an extra level of protection?
Hey! I dont know if you will see this but I love your videos and I have one question! Will the Flo lab series 6 Apple Watch screen protector work with the Rhino Shield CrashGuard case?
Poor guys, I bet he cries deeply when there is a password breach and then he must come up with a new method for his new password.
Why not just use a Password App?
4:03 I just realised, this man's right hand is bigger than his left...
When memes become reality:
XD
Love your content man! Have you ever tried hydrogel/TPU screen protectors? How do they compare to Tempered Glass? Thanks so much
Does it have to be a Google brand or can it be any Titan Security Key?
Have you guys considered getting sponsored content unrelated to tech and the products you review? I feel like in the current YT landscape there’s really nothing wrong with sponsored content but I understand if it’s not something you want to explore as a USP of your channel.
Cool. Subscribed.
What’s that Apple Watch band? 👀
Will you be doing a review of the Whoop you have there?
I saw on my new hp set up instructions booklet and it says it has a nfc thing on the trackpad. Does anyone know why or how this is used?
Hey sorry this is off topic I looked through your videos and can't find anything. On your left wrist what's that opposite of the Apple Watch on the inside of your wrist? Thanks!
Only when I see that cartoon dog, I realized the cartoon female character is probably Val.
Can you review the Whoop please that you both wear. Thanks.
what about sim swipe scam i think yubikey will protect ..???
Where do you get those drinking glasses
Please, completely disregard the last but about the "smart way" to create passwords. Just use a password manager like 1Password, Dashlane,...
My passwords are at least 48 character long and no I don't type them. I hate some services still forcing us to use passwords no longer than 8 character. E i g h t fcking characters come on.... Arghh
icloud and apple id still do not support yubikeys or u2f, correct?
........the only thing i learned about this was that none of these are ready for my use.
I enjoyed the video, but to have a truly well rounded review of hardware authentication devices, you need at least one open source product, because for some, closed source products are not an option. The connector also seems arbitrary (besides NFC), there are adapters you can buy for under 10$ for every connector.
When reading advice, I take two or three stars off from people who don't know the dollar symbol precedes the dollar amount.
@@Vector_Ze This may be one of the dumbest things someone has ever replied to me with.
@@spaghettienforcer4896 My guess is, that means people usually don't see your comments worthy of reply.
You forgot the password ???????? don't you use Lastpass?
bro sorry, but you don't need internet for TOTP, that's why it's totp with basic servers you need a connection to the internet to set i up and then you are free to go
And device that generates that totps is even better than hardware key, because it's harder to extract something from software than hardware.
Bad Actors!! And something about security keys.
Love this.. learnt something new today.
Those dark glasses WHY???????????
Love Canadians🥰
Great content
Best internet couple!
There not a couple she a friend that helps him with all the hard work of videos and reviewing
@@lck4579 Nah, I don't buy it.
@@Erickchicas dude they are not a couple, he already has a wife and she already has a husband. In his previous videos he mentioned it. Even if they're a couple which they aren't, why is it a big deal to you?
@@chadh6855 His wife has a job and maybe she doesn't like to be in video so.
@@alphaomega9387 Nah, not buying it.
I'm trying to figure out HOW this is a review... Basically listing the product with little background on the company. Nothing on durability of use. No OSS. Waste of time.
I’m hearing all this vibe about these keys. This is all new to this 78 year old fart here. Instead of show me what keys are out there, can you explain where and when I would use one. Somewhere I read that the only time I would use a key would be to enter into my Apple account. Is that all they do? You talk about using a key to replace a password. I have something like over 100 various passwords. Does one key replace all these passwords or is it only a place to back them up like backing up your pictures on a hard drive?
Sorry about all these crazy questions. But, that’s how one learns.
Too many goofball antics and comments.
I used to work a customer server job and told my customer always if you create a new password due to hacked account at our service. If you always use the same password like: monty2008 do this instead : monty2008_FB for Facebook Monty2008_Twt for Twitter. Then at least the hacker can’t just copy and paste your password and adding a extra special character and 2 or 3 letter make it way harder and cost more time to hack it.
Nice Mustache!
I use Apple keychain
A security key from google... I laugh any time I hear that for some reason 😂
Google is actually great at security, privacy is the one you should be concerned about LOL 🤣
@@VPC right.
Favorite part about this video is mounty getting to rest.
This is all too confusing. I'm just gonna get hacked because that takes the least effort.
The password creation recipe is unsafe advice, please please please don’t do this. It’s only slightly better than using the exact same password. If any of the services you use suffer data loss the only thing keeping all your other accounts safe is hoping that someone can’t figure out your rules (and they absolutely can if they want to)
Guys can you please please review lingerie❤
1. Really wish this video wasn't so focused on iOS devices. I'd like to know how well the yubikey works with Android and this video didn't touch on that at all.
2. The password generation advice is terrible advice. Use a password manager.
Hi
Google - yuk!
ALL proprietary designs - sorry dudes try again :-(
Just a way for government to make more money
Is that lady’s job literally holding product on camera for 10 second per video and make two three cringe jokes ? 😂 yeah sure “co-workers” lol
Are they dating? Lmfao
Favourite password: 114514
oooooh I like that one
You should have at the least checked which are opensource and have been peer reviewed - unless your intention was to sell crap filled with built in back doors and spyware...
The “banter” doesn’t work. Sorry.
😊👍🌹
your password management technique is terrible :)
Val’s favourite password likely ends in digits “69” 😜
Sunglasses ?????? Not good!!!!!
Your joking around I find annoying. You're dealing with a serious subject and this comedy routine is distracting.
Can you please help me! My Facebook and Instagram have been hacked and I have just received my Thetis key and don’t know how to use it to unlock my account please help me or my Facebook will be deleted November 18th!!!
Hi, since watching this I see this great looking device, maybe you should review it, for the money I think it’s awesome TrustKey G320H