12 Privacy & Security Tools I Use EVERY DAY
Вставка
- Опубліковано 31 тра 2024
- I'm a privacy and security nut. Discover the tools I use on a daily basis to secure my accounts and cloak my private information. You're welcome to copy what I do or find what works for you.
NOTE: This video is not sponsored nor did any company pay to have their product listed. These are what I actually use for my personal and business use.
🔹My Privacy & Security Stack🔹
▶ Password Manager (1Password): www.allthingssecured.com/yt/1...
▶ 2FA Security Key (YubiKey): geni.us/yubico-store
▶ Secure Email (Proton Mail): www.allthingssecured.com/try/...
▶ Email Aliasing (SimpleLogin): simplelogin.io/
▶ Private Communication (Signal): signal.org/
▶ Internet Browser (Brave): www.brave.com
▶ Virtual Address (Postscan Mail): www.allthingssecured.com/try/...
▶ Virtual Credit Card (Privacy): www.privacy.com
▶ Virtual Phone Number (Hushed): www.allthingssecured.com/try/...
▶ Data Deletion (DeleteMe): www.joindeleteme.com/allthing...
▶ Identity Monitoring (Identity Guard): www.allthingssecured.com/try/...
*Some of the links above are affiliate links
If you care about your personal security and privacy online, download my free security checklist here:
✅ Security Checklist: www.allthingssecured.com/secu...
🔹🔹🔹What You Should Watch Next🔹🔹🔹
We've got a lot of great privacy- and security-related content here on the All Things Secured UA-cam channel (although we admit we're a bit biased). If you're wanting to increase your online cybersecurity, here's what's next:
✅ Change these 7 Facebook Privacy Settings NOW! • How to Change Your Fac...
✅ STOP Using VPNs! (here's why): • Don't Use a VPN...it's...
✅ Are spy apps safe? • DON'T USE MOBILE SPY A...
*********************
Video Timestamps
*********************
0:00 - My Privacy & Security Stack
0:18 - This Video is NOT Sponsored
0:39 - Password Manager Tool
1:24 - 2FA Security Key
1:57 - Private Internet Browser
2:24 - Email Privacy Tools (Secure email & aliasing)
3:18 - Secure Messaging App
4:03 - Data Masking Tools (address, phone, credit card)
5:09 - Data Monitoring Tools
*********************
Everybody has a different "tech stack" that they use. In this video, Josh explains the tech stack he uses to maintain privacy and security for both his personal and business use.
#techstack #onlinesecurity #onlineprivacy - Наука та технологія
How does my privacy and security tech stack match up against yours? Leave a comment to let me know what you do differently. I'm curious to know!
if we use 2FA Yubikey do you still need password managers if you only use places on the net the except Yubikeys ? i use Brave as my only browser , i still have gmail but want another one and im not worried about gov spying like some securty privacy utubers talk about im privancy and security from malicious actors hackers and beimg tracked by apps and google lol , i only phones no PC or laptop . So get Yubikeys and a seperate email account , proton mail with vpn looks good or mulvad as well seem to be the best overall but i dont want to use my debit or credit cards to purchase them. Now my bank wants me to use biometrics for sign in too i will see if they except Yubikey , id rather have that than password managers as im not tech savvy lol i feel like id mess it up and be locked out lol
- I don't use Chromium based browsers (specially one that is actively pushing web3 and AI).
- I know "data removal services" are scams.
- I don't use 1Password as my PW manager, I self-host Vaultwarden.
Yeah, I think I'm good.
Why delete my comment? lol
You asked what we do different.
Email aliases - you say good for newsletter and one-offs. I use aliases for everything now. Here, in Australia, we've recently had 2 major companies hacked, with millions of addresses exposed, my (then) main email being one of those. Using Proton Mail aliasing, every one of my old email accounts now has their own different email (alias) - meaning if that organization ever gets hacked, my main Proton Mail address is safe and all I have to do is remove the exposed email (alias) and create another different one for that organization.
This is the way. No account should share an email with any other account. Aliases should also not be easily guessable. They don't need to be as complex as a password, but they should also not be easy enough that someone calling into a call center could guess the address and provide it to the call center agent. This has happened to me, which is why I now use aliases. Recently I had to make a financial transaction that required me calling in. The rep asked for my email address and I had to look it up because even I couldn't remember it.
The beauty of aliases are multi-fold. 1) A little more security, 2) They can help identify which account resulted in you receiving spam. 3) They can be easily disabled or deleted for accounts that you no longer want to use and particularly for services that won't let you delete your account. 4) If an account is breached, you can easily delete the old alias and create a new one along with a new strong password. 5) No commingling of any accounts. Disabling/deleting an alias will have no impact on any other account and there's also no need to keep track of which accounts use which email because they are all unique.
I used aliases for everything as well. Can't recall the last time I gave my actual one for anything.
Just want to encourage you and say how glad I am this channel exists and what you're doing. I've been a cybersecurity advocate for a number of years and have had a number of vital security components in place in my digital life for a while now (password manager, hardware keys, credit freezes, etc). Several years ago, I thought about starting a channel like this but never had the time with a full time job. And this is exactly what I envisioned my channel being. No jealousy at all, I'm so glad you're here doing this. In fact, I often recommend this channel when I'm wanting to get certain points across. I just find, not many people want to listen which is frustrating. Keep up the great work!
My security/privacy posture has been upgraded by learning and implementing your strategies Josh...keep up the good work bloke!
Thank you so much, Rob
Capital One has an extension with virtual numbers built in. I use it all the time. No need to give your actual bank details.
Yes! I know there are quite a few banks that offer virtual cards now.
the reviews says the extension is broken
Fantastic summary! Thanks for sharing your practices. Such a valuable resource.
I'm excited that it was useful!
Thank you for the videos you produce. They are all very informative and I've learned a lot from you. I use most of the same services that you do and recommend everything in this video!
Excellent Video..Lots of good ideas and tips in a single video. Thank You! Time to do some research….
Glad it was helpful, Larry!
Great video Josh! Very useful indeed
Glad you enjoyed it, Steve!
Thank you for the information. This is helpful.
Great info, I just subscribed, thanks 👍
Josh, thanks for sharing.
My pleasure.
Excellent content
Great video as always 👍🏼 One thing I've heard is that if you freeze your credit (here in the UK) then it _might_ affect your credit rating and some lenders may reject an application until 6 months after you've unfrozen your credit. I've not managed to confirm this myself but something worth being aware of if you're planning on any borrowing in the near future.
Hmm, I haven't heard that. If that's true, it's very unfortunate. Protecting your credit shouldn't have any affect on your rating. That's a shame.
Great summary video. Thank you. The Google comment is so true.
Thanks! 🙏
I agree with all your choices.
Awesome. Glad to hear it.
I practice browser isolation so I use them all
Great choices. I literally use all the same apps already cool
Awesome!
Hushed is not privacy-oriented at all. Read their privacy statement, you can confirm they will use all your info to uniquiely identify you-even give it to 3rd parties. Useless if you care about your privacy.
I signed up, looked into them some more, and quickly unsigned up.
Can you tell me which one do you use instead of hushed ?
Any app/service we can use instead of hushed for virtual mobile number?
Cloaked
Privacy and anonymity are 2 different things.
Damn, every time im just DAMN! because there are so many things that no one every tells us either in life or in school and that's mess up cause the same way we say to teens to come back home before midnight or be careful what you wearing or with who you are its the same thing on the internet,
the most crazy thing i find was a youtuber who open FB and just see who post a photo or a location on FB of the same beach and just randomly start saying hi and saying there names and that's scary as shit, personally im used to it CAUSE im the young brother so people know my big bro THANK GOD!
thankfully there's still hope and i start be a bit more careful or at least i try, i try to seperate my work stuff email phone etc and my personal and gaming,
it takes time but its for a good reason and i also start doing the same for family and friends slowly,
well that's all i want to say thanks as always for helping us since no one else will do or no one will do it for free or for good reasons.
Glad it's been helpful to you in some way.
Even in my current cybersecurity course they dont even tell you to use ad blocking
Thank you
Great video! Question: How big of a concern is a password manager getting breached, like the LastPass incident from a few years ago?
Dude, that thumbnail... looking swole. Also, excellent video, as usual. Thanks Josh!
Ha! I'll take the compliment...thanks :)
Thank you for the great video. I appreciate the time you took to create it. Could you recommend a reliable search engine?
Duck Duck Go or Startpage.
I am following a few of your security steps, so far. Re: Brave and it's password manager: One disadvantage is that I must sign on to Microsoft to change or delete these passwords. Having a Microsoft account-- not crazy about this. Also, if someone steals your computer and passes your local entry password, they can easily see the list of all passwords in the manager!! Both Brave and Firefox make it easy to do this. ( I keep a list of all passwords on a piece of paper that never leaves my home. Perhaps this is still the safest)?? Also, I don't synchronize devices (no email on iphone, no banking). I really like using Brave with UA-cam! I am still working on getting rid of Firefox. And you will never see me with my credit card in one hand and the cell phone in the other. No business on there. Work In Progess
I don't use the Brave password manager and generally discourage against using a browser-based password manager. I would find something else so you don't have to open or use a Microsoft account.
Hi man! Thanks for your video! What tools do you use for your calendar and contacts? Thanks!
If you want your calendar and contacts to be private and secure, use a paper calendar and physical address book. If you want convenience and don't care about your privacy and security of your most sensitive information, then use software or an online tool.
Would MySudo not be a more secure and privacy oriented option than Hushed?
Nice tech stack, thanks for sharing!
It‘s a little bit off topic, but I was curious:
What do you think about the services, that TailScale offers, especially the tailnet? :D
I've honestly never heard the name before, so I have no opinion.
Hi Josh, love your content. Is there a company or a service that would help change all your passwords to make sites more secure? I think I use the same password for the majority of websites 🙈
Great question, Laura! Unfortunately it would be almost impossible to do a mass, automated change of all passwords. My recommendation would just be to start small - choose the 5-10 most important accounts and change the passwords for those. Then build from there. It's better to just get started small than never at all!
I'm unsure whether I should buy the FIPS 140-2 Yubikey variant or the normal Yubikey 5 series. I don't need it for work. Thanks in advance!
If you don't need it for work, then the 5 series is more than enough for the average person. In fact, even the Security Key series (most budget-friendly) might work as well.
@@AllThingsSecured Thanks, appreciate it!
SIGNAL IS GREAT!!!
Yes it is.
Is it safe to trust proprietary tool like 1password over bitwarden?
Hi Josh can you male a video about to yubikeys i can use in yubikey authenticator where is a tap it or plug it in my phone the 2fa codes will appear
Are my previous videos about how to set up a 2FA key not very clear or have you just not seen them?
Hi Josh,
Do you take Video ideas from viewers?
Kind regards
As an *Security Reasearcher*
- Done a Ton of (Troubleshooting) in The Last week.
This was A *Worthy Watch.*
Thanks, Adam!
Where do you store your 2FA recovery codes? I thought you used a secure usb drive for that.
My recovery codes get securely stored in a couple different places that I'd rather not disclose. I've never had to use them, though, because I have a backup 2FA key.
Great list, what about Dashlane?
Dashlane is good, but I prefer 1Password or Proton Pass.
How can you run a privacy and security channel and recommend iMessage? I am being sincere when I ask this question.
what are the apps you use for notetaking and todo lists ?
Well now that Proton just acquired Standard Notes…probably that one!
Hi Josh, any advice on a service for virtual phone number for EU countries? Couldn’t find any… Thamks
Not sure where you looked but did an search an search and on the first page 4-5 kinks down found an list with 20+ companies. (duckduckgo)
I promise I'm trying to find one, but so far I don't know of any (yet).
Hi. Could I receive codes as 2fa in a virtual phone number as Hushed? Thanks
Yes, you can. I do it all the time.
You didn't mention the credit monitoring company, but the video shows Identity Guard. Is that the one you recommend?
Yes, that’s the one I’ve been using for the past couple years.
@@AllThingsSecuredThanks. I just signed up. I am linking accounts and it is using Plaid and says the company is Aura...did Aura change their name to Identity Guard?
@@TonyPadgett Aura acquired Identity Guard but have kept them separate.
Exactly. Aura is the parent company of Identity Guard, but I haven't really liked the Aura product as much as Identity Guard.
@@AllThingsSecured Good to hear. I tried Aura and wasn’t that happy with it.
We need a phone Alias service for Europe! Its all which is missing for me :-(
Solid advice. Only one point I'd make, Brave whilst solid is still chromium under the hood, so better but still susceptible to Google shenanigans.
This is true, Brave is Chromium-based, but it is a fork of the Chromium open source project, not a reskin, so it's not susceptible to Google schenanigans.
I wish the credit card, cell phone masking was available in Canada. We have no security/ privacy here or if we do they cost a fortune.
Have you looked at Revolut? I think it works in Canada, but I'm not sure.
Great list of tools.
Do you use a VPN? Thank-you! Could you go over a little more, how to use a made up email address. Like do you use your correct password with it,or is that a made up one also,would that even work if so. I'm a little confused how to go about this,as I'd like to use this method Thank-you!?
Hi! I wanted to send you an email but for a faster reply hope you’ll see this 😊 I wanted to buy the efani sim service but i live in europe netherlands, they told me they don’t offer this here or anytime soon. Do you know something similar for europe? To protect sim(mobile monitoring)?
Thank you so much I really like your videos! 🙏🏻
Only a suggestion, as I've recently found this channel which seems very informative, and also covers the various aspects of SIM cards. It's called "Naomi Brockwell TV", and she's very good at explaining things. Good luck and stay safe.
Is hushed a prefference or cloaked is not ok ?
They both work just great.
Which mobile keyboard you prefer?
The native one.
@@AllThingsSecured Google?
❤️
how much are you spending monthly taken all these services into consideration?
Not as much as you’d think. Some are business expenses (virtual address) and some are free (virtual credit cards). Most others are less than $5/mo.
Way cheaper than the cost of dealing with identity fraud for years after a bank breach.
For the free virtual credit cards, do they apply for the demographics of Europe and India?
Unfortunately the virtual credit cards that I mentioned are US-only. Europe can use another one called Revolut, I think. I'm not sure about India.
Brave have sold out
Simple Login is online for US people or not?
For anybody, not just US.
👍🏻
Thanks!
Why not mysudo vs hushed?
I've used MySudo before and it wasn't bad, but I wasn't crazy about it personally.
Explain how Delete Me works with the Dark Web with removing your information? Please.
Not what the dark web is. Delete me doesn't magically delete your info from data breaches, it deletes your info from legally collected and sold sources and brokers. Almost all websites collect and sell your information when you visit them.
They find your data with various data brokers and then make legal requests to have the personal data removed. You can see more about my experience here: ua-cam.com/video/PpcZ6VIEVVs/v-deo.html
Virtual credit cards from privacy are awesome. Allow me to write assertions for cards that have locked merchant affinity with the ability to easily spot when a specific merchant f*cked up and you've got a customer for life.
With Privacy, even if the merchants mess up, the card will immediately be declined.
Password managers are great ideas. Easiest way to create a high value target
I'm not sure I understand what you're implying here.
Brave is not even close to what I would consider a private browser.
vera crypt
3:32 font anyone?
Can you make a video about action steps to take once you have been sim swapped ? I can’t seem to find a single one on UA-cam. It’s frustrating there’s all these videos on how to prevent but not what to do. Obviously you have to contact your carrier. But from a victim perspective. I’ve lost complete trust in my carrier. I have two phones and don’t know do I need new phone ? New carrier ? New SIM card ? There are some videos that deal with crypto breach but many of these scammers aren’t making crypto scams even detection easy. Ughh 😫someone help. I feel paralyzed what to do next and don’t feel safe at all.
Only a suggestion, as I've recently found this channel which seems very informative, and also covers the various aspects of SIM cards. It's called "Naomi Brockwell TV", and she's very good at explaining things. Good luck and stay safe.
So did you land on Hushed over Cloaked? I know you were pretty jazzed about Cloaked for a while…
I was and still am. In my mind the services are built for two different use cases. When I need a second number for 2FA codes, for example, I want a static number that I own. When I want to just give out a phone number that I can trash later, Cloaked is the way to go.
In any case, I'm really just waiting for Cloaked to move their virtual card feature from beta to public before I really start pushing the service.
i started this video with some hope to get some new tips. but unfortunately immediately from the start, everything is wrong. pw manager, autofill, one pw approach, generator of passwords. i don't know what is worse, but together it is total disaster. sry i can't take you seriously. this video should be titled "what not to do"...
Don't use a password manager. I learned the hard way and they got into EVERYTHING. Write it on paper WAY safer!!!
That is sadly not true. Do you mind explaining who "they" is and how they were able to access everything?
@@AllThingsSecured 6 trips to FBI. Nuff said
@@amygradybsw🤡
You have no secure email unless they are emailing it to you from the same system. If you have protonmail, and it's not mailed from a proton mail address originally, you have no security.
I appreciate the concern, but there are ways to maintain the encryption outside the same system.
@@AllThingsSecured did the internet fix the hole in the security protocols?
google pgp before you speak, that tech was developed 30 years ago for this exact purpose.
@@notusedexerdo you know how little that narrows things down?
@@YTDeletes90PercentOfMyComments when the internet was originally written all email was text based So therefore if you sent an email from one domain to another domain it could be read by anybody. My understanding is they were working on a way to fix that obviously flaw.
Seems like you forgot the most critical security tool - VPN
Interesting point. I think I didn’t add it because it’s not something I use every single day.
@@AllThingsSecured I see. Naomi Brockwell advises to leave on permanently
Most companies know who you are VPN dont matter
viritual cards are US only so useless. and 70$X2 for yubico is a total rippoff
You can get virtual cards internationally using Revolut. And as for Yubico, they have the Security Key series that is much more budget-friendly.
Which service for virtual Adresses? Love your vids btw.