Audit Your Online Footprint with a Password Manager

I’ve been using the password manager 1Password for nearly a year now. I’ve mentioned many times how it’s a great way to keep all of your passwords in one place. This morning, while browsing through the list of passwords, I realized it had a different use.

Over the last year, I’ve accumulated over 300 online accounts. My situation may not be typical, but as I was looking through the list, I realized I couldn’t remember why I even used some of these accounts. It was time for an audit.

Here’s what I did.

  1. Sorted the account list by date.
    I wanted to see if there any accounts I could just get rid of. I added a tag to each of the ones I didn’t care about anymore. I also tried to tag the accounts with a category. My categories are pretty coarse. I use some tags specific to my day job, Social Networks, Tools, Traveler Programs, Game Sites, Blogs and the new category, Unused. Any sites that I’m no longer interested in, I tag Unused.
  2. Sort by password
    Not all password manager let you do this but 1Password displays the passwords in a list as a series of colored bars from Red to Green. You want to make sure that you are using secure passwords. Passwords listed in Red or Yellow will need to change.  I go through each account and update the passwords to something more secure.
  3. Sort by Location
    For some reason I have duplicate account information for some domains, sorting your password list by location helps you identify them.
  4. Print a paper copy
    A lot of people, myself included often forget to keep a physical copy of your passwords. Why might you want to do this? Well, not to get morbid but if you get hit by a bus, is someone going to be able to get to your account information to help tidy up your affairs? A physical copy of your password list kept in a safe will eliminate this problem.

After you’ve gone through these four simple steps, the next step is to eliminate. Go to the passwords tagged Unused. It’s time to prune your footprint. This isn’t always an easy process. For each of the websites you’ve identified, go to the site itself and search for delete account. One easy way to do it is to use this handy Google Search.

 site:sitename.com delete account

This will likely return the appropriate information on how to remove your account.

Don’t delete the account from your password manager yet. After you’ve gone through this exercise, you want to go back to these sites in a few weeks to ensure that they did delete your account.

There you have it. A few simple steps to identify and possibly cleanup your online footprint. If you have any tips for how you keep your identity clean, post it in the comments.

Audit the password quality. In the account list, you can sort your passwords by field.

Free WiFi in Airports – Protect your Macbook

If you are one of the millions of people traveling through airports this holiday season, you are going to get the opportunity to surf the net for free thanks to partnership deals between WiFi providers and Google.

Before you jump on the internet though, you want to make sure your Macbook is protected from others trying to steal your stuff. Follow the instructions in this older post to get your Macbook Firewall configured.

Keep your Macbook Secure While Traveling

My main system is a Macbook Pro, I love having such a powerful system in such a sexy package. I travel a lot and am often concerned about what might happen in the event that my laptop is stolen.

Luckily there are a number of things you can do to help keep your Macbook locked down in the event it is taken.

Require a password
By default, OSX will resume from sleep or a screensaver back to the desktop. While this is convenient, on a laptop, while traveling, this is rather dangerous. You can configure OSX to use passwords when resuming from a sleep or screensaver through System Preferences.

Open your System Preferences
System Preferences window

Click Security
security

Check the box “Require password to wake this computer from sleep or screen saver.”

Encrypt your home directory
OSX comes with software that will encrypt and decrypt the contents of your home directory. This is an important feature to use on a Macbook because once it is enabled, the content in your home directory is scrambled. In the event your machine is stolen, the contents in your home directory will at least be safe from prying eyes.

Configuring the File Vault is easy. Click System Preferences and click Security again.

Once in the Security Preference, click File Vault.
File Vault

Click on the button Turn on Vault… When you do this, you will have to enter an administrator username and password.

You are then presented with a dialog to enter a master password. This password is a safety net that will allow you to decrypt your system in the event you forget your account password. Click the key icon and create a very strong password and WRITE IT DOWN, and stick it in your file cabinet.
After a few moments, you will have an encrypted home directory.

Create a secure account password
I can’t stress enough how important it is to have a secure password in your system. Even if you encrypt your home directory, if someone can easily guess your password, it doesn’t matter how encrypted your data is.

There is a really great program 1Password that will manage your account passwords. It can generate secure passwords for you. I however, take a low tech approach to secure passwords. The website Diceware shows you how to create very strong but easy to remember passphrases. Use this site and create a long password. Your data will thank you if it is ever lost.  

Turn on your Firewall
If you are using WiFi on a public network, you want to make sure your Macbook is inaccessible. OSX includes a firewall that will protect your computer on public networks.

There you go, some simple tips that will help you keep your system locked down, if you have any other tips please post them here.

The one Mac app that will save your ass


Big Old Rusty Lock
Internet security experts will tell you that using the same password on every website is extremely dangerous. Once a hacker has compromised one site, it’s easy to write a script to gain access to multiple sites. Twitter learned this the hard way.

If you have OS X there are a number of utilities you can install which will allow you to create multiple passwords and keep the safe under a super secure password.

All of these utilities keep your passwords secure, two of them offer integration with your web browser. This integration will allow you to visit a page and autofill the login forms. This is similar to the password managers built into web browser but have better security through advanced encryption.

The one you choose comes down to personal preference. I’ve chosen 1Password. It’s super easy to setup. If you have moved from KeyPass on Windows it will import your password file. It also integrates with Firefox. Wallet, which came in close second only seems to integrate with Safari.

If you know any other utilities for keeping your website passwords secure, let us know.

Use the built-in firewall to protect your system

OS X now includes a built-in Firewall. The Firewall will help keep your system safe from hackers, especially on unknown networks. This video tutorial shows you how to enable the OS X application firewall and configure it for proper use.