View source for Protect your accounts using strong passwords, pw managers, 2fa

<h1>Passwords</h1>

<p><strong>Passwords are your first line of defense</strong> against anyone who would like to hack into these accounts. They are what keep your information safe; they enable you to keep control of your data.</p>

<p>But preventing your accounts from being hacked requires passwords that are long, strong, complex, unique and practical; and you need to have a DIFFERENT long, strong, unique and practical password for each account.</p>

<h2>Why do we need strong passwords?</h2>

<p>The internet stores a lot of data about you. Your credit card information might be tied to your Apple ID or Android Device ID, as well as to your online shopping accounts. Personal photos, including of your family, children, and friends, might be stored on Facebook, on your phone and and on the servers of your cloud storage. Your email and messaging app accounts have all your conversations with partners, friends and family, as well as work-related discussions and other information.</p>

<p>Your passwords need to be strong enough so you can keep control of your accounts. Once an account is hacked, an attacker can:<br />* Access all the information in that account<br />* Lock you out of that account<br />* Impersonate you and communicate with, or send phishing emails to, your network<br />* Try to use this account to gain access to other accounts or use it to try to gain access to your financial information</p>

<p>A good password is the only thing keeping this information from being accessed. In short, it gives you control over your data.</p>

<p><strong>No need to change your strong passwords once they are in place.</strong> Changing passwords regularly was a common recommendation until a couple of years ago. This is outdated now because if you follow this list of best practices, there is absolutely no need to change your passwords regularly. The reason why changing passwords is no longer recommended is the following: Researchers have found that changing passwords regularly does more harm than good as it encourages people to choose weaker passwords. Better choose a strong and unique password once, instead of regularly changing a weak one to another weak one.</p>

<h2>Resources on creating strong passwords</h2>

<p><strong>[Online course] Totem's course about secure passwords</strong> (free) - Passwords are your first line of defence online, so it&rsquo;s really important that these are long and unique. But how can you manage this for all your accounts? The course will guide you through setting up KeePassXC, a password manager that makes creating and storing passwords easier and safer. You&rsquo;ll also look at Two-Factor Authentication (2FA), for added security. You should end the course with a solid password-management strategy that protects your accounts, without taking up too much of your time (or brain-power!).&nbsp; This course is available in: [https://learn.totem-project.org/courses/course-v1:Totem+TP_SP_001+course/course/ English], [https://learn.totem-project.org/courses/course-v1:Totem+TP_SP_ES+001/about Spanish], [https://learn.totem-project.org/courses/course-v1:Totem+TP_SP_FR_001+cours/about French], [https://learn.totem-project.org/courses/course-v1:Totem+TP_SP_AR+001/about Arabic], [https://learn.totem-project.org/courses/course-v1:Totem+TP_SP_RU+001/about Russian], [https://learn.totem-project.org/courses/course-v1:Totem+TP_SP_FA+001/about Farsi]</p>

<p><strong>[Guide] Creating strong passwords</strong>&nbsp; [by Electronic Frontier Foundation]</p>
<ul>
    <li>English: <a href="https://ssd.eff.org/en/module/creating-strong-passwords" target="_blank" rel="noopener">https://ssd.eff.org/en/module/creating-strong-passwords</a>&nbsp;</li>
    <li>Spanish: <a href="https://ssd.eff.org/es/module/creando-contrase%C3%B1as-seguras" target="_blank" rel="noopener">https://ssd.eff.org/es/module/creando-contrase%C3%B1as-seguras</a></li>
    <li>French: <a href="https://ssd.eff.org/fr/module/cr%C3%A9er-des-mots-de-passe-robustes" target="_blank" rel="noopener">https://ssd.eff.org/fr/module/cr%C3%A9er-des-mots-de-passe-robustes</a></li>
    <li>Arabic: <a href="https://ssd.eff.org/ar/module/%D9%88%D8%B6%D8%B9-%D9%83%D9%84%D9%85%D8%A7%D8%AA-%D8%B3%D8%B1-%D9%82%D9%88%D9%8A%D8%A9" target="_blank" rel="noopener">https://ssd.eff.org/ar/module/%D9%88%D8%B6%D8%B9-%D9%83%D9%84%D9%85%D8%A7%D8%AA-%D8%B3%D8%B1-%D9%82%D9%88%D9%8A%D8%A9</a></li>
    <li>Russian: <a href="https://ssd.eff.org/ru/module/%D1%81%D0%BE%D0%B7%D0%B4%D0%B0%D0%BD%D0%B8%D0%B5-%D0%BD%D0%B0%D0%B4%D1%91%D0%B6%D0%BD%D1%8B%D1%85-%D0%BF%D0%B0%D1%80%D0%BE%D0%BB%D0%B5%D0%B9" target="_blank" rel="noopener">https://ssd.eff.org/ru/module/%D1%81%D0%BE%D0%B7%D0%B4%D0%B0%D0%BD%D0%B8%D0%B5-%D0%BD%D0%B0%D0%B4%D1%91%D0%B6%D0%BD%D1%8B%D1%85-%D0%BF%D0%B0%D1%80%D0%BE%D0%BB%D0%B5%D0%B9</a></li>
    <li>...and many more translations</li>
</ul>
<hr />
<h2>Password managers</h2>
<p>&nbsp;A password manager is a tool that creates and stores passwords for you, so you can use many different passwords on different sites and services without having to memorize them. You only need to remember one master password that allows you to access the encrypted password manager database of all your passwords.</p>
<p><strong>[Video] Animated Overview</strong>: <a class="inline_disabled" href="https://ssd.eff.org/en/module/animated-overview-using-password-managers-stay-safe-online" target="_blank" rel="noopener">Using Password Managers to Stay Safe Online</a> (by EFF) - available in many languages</p>
<h3>PW manager: Bitwarden</h3>
<p>Bitwarden (<a href="https://bitwarden.com/" target="_blank" rel="noopener">https://bitwarden.com/</a>) is a&nbsp;free and open-source&nbsp;password management service&nbsp;that stores sensitive information such as website credentials in an&nbsp;encrypted&nbsp;vault. The Bitwarden platform offers a variety of client applications including a&nbsp;web interface,&nbsp;desktop applications,&nbsp;browser extensions,&nbsp;mobile apps, and a command-line interface. It is a popular password manager option among human rights defenders.</p>
<p><strong>[Videos] Getting Started with Bitwarden </strong>(English) <a href="https://vimeo.com/showcase/8692945" target="_blank" rel="noopener">https://vimeo.com/showcase/8692945</a></p>
<p><strong>[Guide] How to use Bitwarden</strong> to manage passwords on all devices, including phones. Free, open source software.</p>
<ul>
    <li>English: Get Started with Bitwarden <a href="https://bitwarden.com/help/get-started-individual-user/" target="_blank" rel="noopener">https://bitwarden.com/help/get-started-individual-user/</a></li>
    <li>English: <a href="https://docs.google.com/presentation/d/e/2PACX-1vRj4oFJeS4hW6RnS3SPctCDAPeEe2XpAq4Iolr9LME3PDG2wKx-hpCNsqhjqz01UmFpTX8IVKObdvNM/embed?start=false&amp;loop=false&amp;delayms=3000#slide=id.gd279e4f08d_1_1062" target="_blank" rel="noopener">https://docs.google.com/presentation/d/e/2PACX-1vRj4oFJeS4hW6RnS3SPctCDAPeEe2XpAq4Iolr9LME3PDG2wKx-hpCNsqhjqz01UmFpTX8IVKObdvNM/embed?start=false&amp;loop=false&amp;delayms=3000#slide=id.gd279e4f08d_1_1062</a></li>
    <li>Spanish: <a href="https://www.pantallasamigas.net/guia-configuracion-programa-gestor-contrasenas-bitwarden-ciberseguridad/" target="_blank" rel="noopener">https://www.pantallasamigas.net/guia-configuracion-programa-gestor-contrasenas-bitwarden-ciberseguridad/</a></li>
</ul>
<p><strong>[Video] How to send sensitive info (files or text) securely to anyone, using Bitwarden</strong> <a href="https://vimeo.com/539797097" target="_blank" rel="noopener">https://vimeo.com/539797097</a> (EN)</p>
<p><strong>[Video] How to set up Bitwarden for your internet browser</strong> <a href="https://vimeo.com/579574710" target="_blank" rel="noopener">https://vimeo.com/579574710</a> (EN)</p>
<p><strong>[Guide] Getting started with Bitwarden mobile</strong> <a href="https://bitwarden.com/help/getting-started-mobile/" target="_blank" rel="noopener">https://bitwarden.com/help/getting-started-mobile/</a> (EN)</p>
<h3>PW manager: KeepassXC</h3>
<p>KeePassXC (<a href="https://keepassxc.org/" target="_blank" rel="noopener">https://keepassxc.org/</a>) is a free and open-source password manager. It started as a community fork of KeePassX. It is built using Qt5 libraries, making it a multi-platform application which can be run on Linux, Windows, and macOS.</p>
<p><strong>[Video] Manage your passwords using KeePassXC</strong> (by Justice and Peace Netherlands)</p>
<ul>
    <li>English: <a href="https://www.youtube-nocookie.com/embed/Dm3Xeo0hIQk" target="_blank" rel="noopener">https://www.youtube-nocookie.com/embed/Dm3Xeo0hIQk</a></li>
</ul>
<p><strong>[Guide] How to use KeepassXC</strong> (by Electronic Frontier Foundation) - KeePassXC is a cross-platform password manager that allows you to store all of your passwords in one location. KeepassXC is a free, open source software that you would download to your computer/laptop (not your phone).</p>
<ul>
    <li>English: <a href="https://ssd.eff.org/en/module/how-use-keepassxc" target="_blank" rel="noopener">https://ssd.eff.org/en/module/how-use-keepassxc</a></li>
    <li>Spanish: <a href="https://ssd.eff.org/es/module/c%C3%B3mo-usar-keepassxc" target="_blank" rel="noopener">https://ssd.eff.org/es/module/c%C3%B3mo-usar-keepassxc</a></li>
    <li>French: <a href="https://ssd.eff.org/fr/module/guide-pratique-utiliser-keepassxc" target="_blank" rel="noopener">https://ssd.eff.org/fr/module/guide-pratique-utiliser-keepassxc</a></li>
    <li>Arabic: <a href="https://ssd.eff.org/ar/module/%D9%83%D9%8A%D9%81%D9%8A%D8%A9-%D8%A7%D8%B3%D8%AA%D8%AE%D8%AF%D8%A7%D9%85-%D9%83%D9%8A-%D8%A8%D8%A7%D8%B3-%D8%A7%D9%83%D8%B3" target="_blank" rel="noopener">https://ssd.eff.org/ar/module/%D9%83%D9%8A%D9%81%D9%8A%D8%A9-%D8%A7%D8%B3%D8%AA%D8%AE%D8%AF%D8%A7%D9%85-%D9%83%D9%8A-%D8%A8%D8%A7%D8%B3-%D8%A7%D9%83%D8%B3</a></li>
    <li>Russian: <a href="https://ssd.eff.org/ru/module/%D1%80%D1%83%D0%BA%D0%BE%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE-%D0%BF%D0%BE-keepassxc" target="_blank" rel="noopener">https://ssd.eff.org/ru/module/%D1%80%D1%83%D0%BA%D0%BE%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE-%D0%BF%D0%BE-keepassxc</a></li>
    <li>(and other languages...)</li>
</ul>
<hr />
<h2>Two factor authentication (2fa)</h2>
<p>What is two factor authentication?</p>
<p><iframe title="YouTube video player" src="https://www.youtube-nocookie.com/embed/0mvCeNsTa1g" width="560" height="315" allowfullscreen="allowfullscreen" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"></iframe></p>
<h3>Resources on 2fa</h3>
<p><strong>[Guide] How to enable 2fa</strong> (by Electronic Frontier Foundation)</p>
<ul>
    <li>English: <a href="https://ssd.eff.org/en/module/how-enable-two-factor-authentication" target="_blank" rel="noopener">https://ssd.eff.org/en/module/how-enable-two-factor-authentication</a></li>
    <li>Spanish: <a href="https://ssd.eff.org/es/module/c%C3%B3mo-habilitar-la-autenticaci%C3%B3n-de-dos-factores" target="_blank" rel="noopener">https://ssd.eff.org/es/module/c%C3%B3mo-habilitar-la-autenticaci%C3%B3n-de-dos-factores</a></li>
    <li>French: <a href="https://ssd.eff.org/fr/module/guide-pratique-activer-l%E2%80%99authentification-%C3%A0-deux-facteurs" target="_blank" rel="noopener">https://ssd.eff.org/fr/module/guide-pratique-activer-l%E2%80%99authentification-%C3%A0-deux-facteurs</a></li>
    <li>Arabic: <a href="https://ssd.eff.org/ar/module/%D8%AF%D9%84%D9%8A%D9%84-%D9%83%D9%8A%D9%81%D9%8A%D8%A9-%D8%AA%D9%81%D8%B9%D9%8A%D9%84-%D8%A7%D9%84%D8%AA%D9%88%D8%AB%D9%8A%D9%82-%D8%A7%D9%84%D8%AB%D9%86%D8%A7%D8%A6%D9%8A-two-factor-authentication" target="_blank" rel="noopener">https://ssd.eff.org/ar/module/%D8%AF%D9%84%D9%8A%D9%84-%D9%83%D9%8A%D9%81%D9%8A%D8%A9-%D8%AA%D9%81%D8%B9%D9%8A%D9%84-%D8%A7%D9%84%D8%AA%D9%88%D8%AB%D9%8A%D9%82-%D8%A7%D9%84%D8%AB%D9%86%D8%A7%D8%A6%D9%8A-two-factor-authentication</a></li>
    <li>Russian: <a href="https://ssd.eff.org/ar/module/%D8%AF%D9%84%D9%8A%D9%84-%D9%83%D9%8A%D9%81%D9%8A%D8%A9-%D8%AA%D9%81%D8%B9%D9%8A%D9%84-%D8%A7%D9%84%D8%AA%D9%88%D8%AB%D9%8A%D9%82-%D8%A7%D9%84%D8%AB%D9%86%D8%A7%D8%A6%D9%8A-two-factor-authentication" target="_blank" rel="noopener">https://ssd.eff.org/ar/module/%D8%AF%D9%84%D9%8A%D9%84-%D9%83%D9%8A%D9%81%D9%8A%D8%A9-%D8%AA%D9%81%D8%B9%D9%8A%D9%84-%D8%A7%D9%84%D8%AA%D9%88%D8%AB%D9%8A%D9%82-%D8%A7%D9%84%D8%AB%D9%86%D8%A7%D8%A6%D9%8A-two-factor-authentication</a></li>
    <li>(and other languages...)</li>
</ul>
<hr />
<h2>Be aware of spear phishing attacks</h2>
<p><strong>Phishing happens to everyone</strong>, but most people only become aware of it once they have become a victim of an attack.</p>
<p><strong>Protecting yourself from phishing attacks</strong> starts with identifying an email or message as an attack before you click on the link or download the file. But even if you are careful, a phishing attack can still sometimes be successful. Don&rsquo;t panic. If you have clicked on a phishing link and given an attacker access to your data, you can still reduce the damage - to yourself as well as to your colleagues, friends, and family.</p>
<p>What is phishing?</p>
<p><iframe src="https://player.vimeo.com/video/444354623?h=501ce0881b&amp;title=0&amp;byline=0&amp;portrait=0" width="640" height="360" allowfullscreen="allowfullscreen" allow="autoplay; fullscreen; picture-in-picture"></iframe></p>
<p><a href="https://vimeo.com/444354623">Phishing Overview</a> from <a href="https://vimeo.com/user71914801">Renee McLaughlin</a> on <a href="https://vimeo.com">Vimeo</a>.</p>
<h3>Resources for avoiding a phishing attack</h3>
<p><strong>[Guide] <a class="inline_disabled" href="https://safecomputing.umich.edu/be-aware/phishing-and-suspicious-email/shortened-url-security#:~:text=There%20are%20a%20number%20of,tinyurl.com." target="_blank" rel="noopener">How to reveal full URLs</a><br /></strong></p>
<p><strong>[Online course] Totem online course on Phishing Attacks</strong> (free).<strong> </strong>In this course you will learn about phishing attacks: what they are, what they are used for, how you can identify them, and what you can do if you have been phished.&nbsp;</p>
<ul>
    <li>English: <a href="https://learn.totem-project.org/courses/course-v1:Totem+TP_PM_001+course/about" target="_blank" rel="noopener">https://learn.totem-project.org/courses/course-v1:Totem+TP_PM_001+course/about</a></li>
    <li>Spanish: <a href="https://learn.totem-project.org/courses/course-v1:Totem+TP_PM_ES+001/about" target="_blank" rel="noopener">https://learn.totem-project.org/courses/course-v1:Totem+TP_PM_ES+001/about</a></li>
    <li>French: <a href="https://learn.totem-project.org/courses/course-v1:Totem+TP_PM_FR001+cours/about" target="_blank" rel="noopener">https://learn.totem-project.org/courses/course-v1:Totem+TP_PM_FR001+cours/about</a></li>
    <li>Russian: <a href="https://learn.totem-project.org/courses/course-v1:Totem+TP_PM_RU+001/about" target="_blank" rel="noopener">https://learn.totem-project.org/courses/course-v1:Totem+TP_PM_RU+001/about</a></li>
    <li>Arabic: <a href="https://learn.totem-project.org/courses/course-v1:Totem+TP_PM_AR+001/about" target="_blank" rel="noopener">https://learn.totem-project.org/courses/course-v1:Totem+TP_PM_AR+001/about</a></li>
    <li>Farsi: <a href="https://learn.totem-project.org/courses/course-v1:Totem+TP_PM_FA+001/about" target="_blank" rel="noopener">https://learn.totem-project.org/courses/course-v1:Totem+TP_PM_FA+001/about</a></li>
</ul>
<p><strong>[Guide] How to avoid a phishing attack</strong> (by Electronic Frontier Foundation) - This guide will help you to identify phishing attacks when you see them and outline some practical ways to help defend against them.</p>
<ul>
    <li>English: <a href="https://ssd.eff.org/en/module/how-avoid-phishing-attacks" target="_blank" rel="noopener">https://ssd.eff.org/en/module/how-avoid-phishing-attacks</a></li>
    <li>Spanish: <a href="https://ssd.eff.org/es/module/c%C3%B3mo-evitar-los-ataques-de-phishing-o-suplantaci%C3%B3n-de-identidad" target="_blank" rel="noopener">https://ssd.eff.org/es/module/c%C3%B3mo-evitar-los-ataques-de-phishing-o-suplantaci%C3%B3n-de-identidad</a></li>
    <li>French: <a href="https://ssd.eff.org/fr/module/guide-pratique-%C3%A9viter-les-attaques-par-hame%C3%A7onnage" target="_blank" rel="noopener">https://ssd.eff.org/fr/module/guide-pratique-%C3%A9viter-les-attaques-par-hame%C3%A7onnage</a></li>
    <li>Arabic: <a href="https://ssd.eff.org/ar/module/%D8%AF%D9%84%D9%8A%D9%84-%D9%83%D9%8A%D9%81%D9%8A%D8%A9-%D8%AA%D8%AC%D9%86%D8%A8-%D9%87%D8%AC%D9%85%D8%A7%D8%AA-%D8%A7%D9%84%D8%AA%D8%B5%D9%8A%D8%AF-phishing" target="_blank" rel="noopener">https://ssd.eff.org/ar/module/%D8%AF%D9%84%D9%8A%D9%84-%D9%83%D9%8A%D9%81%D9%8A%D8%A9-%D8%AA%D8%AC%D9%86%D8%A8-%D9%87%D8%AC%D9%85%D8%A7%D8%AA-%D8%A7%D9%84%D8%AA%D8%B5%D9%8A%D8%AF-phishing</a></li>
    <li>Russian: <a href="https://ssd.eff.org/ru/module/%D1%80%D1%83%D0%BA%D0%BE%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE-%D0%BF%D0%BE-%D0%B7%D0%B0%D1%89%D0%B8%D1%82%D0%B5-%D0%BE%D1%82-%D1%84%D0%B8%D1%88%D0%B8%D0%BD%D0%B3%D0%BE%D0%B2%D1%8B%D1%85-%D0%B0%D1%82%D0%B0%D0%BA" target="_blank" rel="noopener">https://ssd.eff.org/ru/module/%D1%80%D1%83%D0%BA%D0%BE%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE-%D0%BF%D0%BE-%D0%B7%D0%B0%D1%89%D0%B8%D1%82%D0%B5-%D0%BE%D1%82-%D1%84%D0%B8%D1%88%D0%B8%D0%BD%D0%B3%D0%BE%D0%B2%D1%8B%D1%85-%D0%B0%D1%82%D0%B0%D0%BA</a></li>
    <li>(and other languages...)</li>
</ul>
<p><strong>GCA Cyber Toolkit</strong> <a href="https://gcatoolkit.org/mission-based-orgs/prevent-phishing-and-malware/" target="_blank" rel="noopener">https://gcatoolkit.org/mission-based-orgs/prevent-phishing-and-malware/</a>&nbsp; The tools included in this toolbox aim to help prevent these types of attacks. Included are: DNS security (DNS, or Domain Name System, is the method by which you are able to navigate the internet) to help prevent you from going to infected websites; anti-virus software to help prevent viruses and other malicious software from getting into your systems; and ad blockers, together with correct filter lists, help prevent malicious activity and access to malicious websites while browsing the Internet.</p>
<p><strong>Google Phishing Quiz</strong> <a href="https://phishingquiz.withgoogle.com/" target="_blank" rel="noopener">https://phishingquiz.withgoogle.com/</a> Can you spot when you&rsquo;re being phished? Identifying phishing can be harder than you think. Phishing is an attempt to trick you into giving up your personal information by pretending to be someone you know. Can you tell what's fake?</p>
<p>&nbsp;</p>