Handle your sh*t, Fabius...

I’m seeing more and more scams, account hacks, and online fraud these days. And yet, people are still walking around using “password123”.

The reality is: Email 2FA (Two-Factor Authentication) and SMS-based authentication are no longer enough. If a scammer gets access to your email or phone number (which is easier than you think), they can bypass these security measures.

Good security shouldn’t be limited to IT professionals—this is basic personal hygiene in 2023 and onward.

So, let’s go over some actual steps you can take to lock down your accounts before you get hacked.

🔑 1. DO NOT REUSE PASSWORDS. EVER.

If you use the same password for multiple accounts, one data breach could expose your entire digital life.

💡 Solution: Use a password manager like:

• 1Password
• Dashlane
• Bitwarden
• NordPass

These tools generate, store, and auto-fill strong, unique passwords for every account. You don’t need to remember them—just one master password.

If you absolutely refuse to use a password manager, then at least:
✅ Use long, complex passwords (e.g., 16+ characters, random letters/numbers/symbols).
✅ Store them in a notebook (yes, old-school, but better than reusing the same password).

🔐 2. ENABLE STRONG 2FA (TWO-FACTOR AUTHENTICATION)

What is 2FA? It’s an extra step that makes sure you (not a hacker) are the one logging in. Even if someone has your password, they won’t be able to access your account without this second factor.

🚫 Avoid these weak 2FA methods:

• Email 2FA – If someone hacks your email, they now control your 2FA too.
• SMS 2FA – Hackers can intercept your messages via SIM-swaps.

✅ Use these instead:

• Authenticator apps (Google Authenticator, Authy, Microsoft Authenticator)
• Physical security keys (YubiKey, SoloKey, Titan Key)

How to Enable 2FA:
1️⃣ Go to your account security settings. For example:

• Google: myaccount.google.com/security
• Facebook: facebook.com/security
• Twitter/X: twitter.com/settings/security

2️⃣ Look for Two-Factor Authentication (2FA) or Multi-Factor Authentication (MFA).
3️⃣ Choose “Authenticator App” or “Security Key” instead of email/SMS.
4️⃣ Follow the setup instructions. If using an app, it will generate time-sensitive codes for you to enter when logging in.

🛡 3. WHY YOU NEED A HARDWARE SECURITY KEY (AND HOW TO USE IT)

Want the ultimate protection? Use a physical security key (like a YubiKey).

What is it?
🔹 A small USB/NFC device that acts as a physical lock for your accounts.
🔹 Without this key plugged in, nobody can access your account, even if they have your password.

How it works:
1️⃣ Buy two hardware security keys from an online store (Amazon, Takealot, Galaxus, etc.).
2️⃣ Go to your important account security settings (Google, Facebook, etc.) and register the key under 2FA/MFA.
3️⃣ Label them "Primary YubiKey" and "Backup YubiKey".
4️⃣ Keep one on your keychain and store the backup somewhere safe (home safe, with a trusted family member).

Why two keys? If you lose your main key, the backup saves you from getting locked out of your accounts.

🔑 4. PASSKEYS: THE FUTURE OF LOGIN SECURITY

Passkeys are the next-gen replacement for passwords—and they are actually safer than anything we’ve used before.

How do they work?
🔹 Instead of a password, your device (phone/laptop) stores a unique cryptographic key.
🔹 When logging in, your device authenticates you automatically—no password needed.
🔹 This means phishing attacks and password leaks are useless against passkeys.

✅ Many major companies already support passkeys, including:

• Google
• Apple
• Microsoft
• PayPal

How to Enable Passkeys:

• If using an iPhone: Go to Settings → Passwords → Passkeys
• For Google accounts: Enable “Passkeys” in Google security settings

If your accounts support passkeys, turn them on. They are easier and safer than passwords.

🔥 Final Security Setup Recommendation:

🔳 Step 1: Get a password manager and use unique passwords for every account.
🔳 Step 2: Enable 2FA with an authenticator app or security key.
🔳 Step 3: Use hardware security keys for critical accounts.
🔳 Step 4: If available, enable passkeys instead of passwords.

Wrapping Up: Just Do It.

Security doesn’t have to be complicated. These steps take maybe 30 minutes total but could save you years of headaches, lost money, and identity theft nightmares.

So stop making it easy for hackers. Secure your sh*t. Today. 🔐