im getting emails from google and twitter that someone has my password to my account. I wouldn't give a shit since google and twitter block foreign logins automatically but the problem is I literally have the exact same password for hundreds of online accounts. All this guy has to do is go to random websites and login with my email and password and he can get everything. fuck he probably has everything already. he can access all my credit card numbers/banking info, me and everyone is my family's names and addresses, all my photos, messages, pincodes to get into my houses, my ssn, my college logins, I have scans of my passport, drivers license, health card, and maybe even my birth certificate on dropbox and evernote. what should I do? am I basically fucked???
change everything you have
use lastpass or equivalent password manager asap since it can generate and remember random passwords to your accounts (don't let chrome/whatever browser store ur passwords either)
USE DIFFERENT PASSWORDS FOR DIFFERENT THINGS PLS
someone got into my steam account because they got my email password from another thing entirely. they can and will get into everything.
use lastpass or equivalent password manager asap since it can generate and remember random passwords to your accounts (don't let chrome/whatever browser store ur passwords either)
USE DIFFERENT PASSWORDS FOR DIFFERENT THINGS PLS
someone got into my steam account because they got my email password from another thing entirely. they can and will get into everything.
Firehow to internet 101
-use the same password for every site
-upload your fucking passport and BIRTH CERTIFICATE??????? on dropbox
-let your password get stolen
yeah man, you nailed it
-kick someone who's already down
-use the same password for every site
-upload your fucking passport and BIRTH CERTIFICATE??????? on dropbox
-let your password get stolen
yeah man, you nailed it[/quote]
-kick someone who's already down
this has happened to me a few times. nothing was ever taken.... just changed the important ones right away. the best advise i can give is for banking/paypal/really important shit, make a different username. if you catch it early you should be fine.
I highly highly recommend everyone use two-factor authentication on every account/website they can.
It's definitely inconvenient every time you need to sign in, but it does add a decent amount of security.
It's definitely inconvenient every time you need to sign in, but it does add a decent amount of security.
Listen to what fire said, it's some solid advice
I really would edit your main post to remove the list of things he could have access to, it's unlikely he'd check here but if he does you've just given him a bunch of ideas of accounts to access
I really would edit your main post to remove the list of things he could have access to, it's unlikely he'd check here but if he does you've just given him a bunch of ideas of accounts to access
paypal me all ur money i'll hold it while u get this sorted out
If ure a lazy shit do what I do and have different strong passwords for your important accounts (main email, dropbox, bank, xhamster etc.) and a garbage password for everything else. There's no need to make 16 digit encrypted passwords for every troll account on random websites, but just make sure that your real accounts are secure and separate from your meme accounts.
ok so I did what flatline said and I've got some random passwords setup for everything with lastpass, I've turned on two step verification on a few of my most important accounts.
I'm very naive and thought something like this would never happen to me and have been really reckless with online security ever since I was young... It's translated into not locking my car and house most of the time too. It finally bit me in the ass this time around.
on accounts where I could see the last sign in I've discovered my attacker is a guy in kiev, ukraine. I'm on hold with my bank right now, transferring me to a higher up department to get my shit straightened out. I only have around $10k in my account so I'm not too worried about it, mostly worried about this guy stealing my identity.
I can't remember why I have scans of all my important shit backed up in anything other than google drive, that's where I messed up the biggest. they are surprisingly good scans too, possibly good enough for reproduction.
anyways let's hope this guy isn't a fucking dick and fucks up my life
heres a meme I found when going through my dropbox last night that got me kicked out of class in high school because I laughed so hard on the middle of class when I saw it on reddit:
https://s-media-cache-ak0.pinimg.com/736x/50/d0/82/50d082dc57f53ec88dbb3d2e84e5bfd6.jpg
I'm very naive and thought something like this would never happen to me and have been really reckless with online security ever since I was young... It's translated into not locking my car and house most of the time too. It finally bit me in the ass this time around.
on accounts where I could see the last sign in I've discovered my attacker is a guy in kiev, ukraine. I'm on hold with my bank right now, transferring me to a higher up department to get my shit straightened out. I only have around $10k in my account so I'm not too worried about it, mostly worried about this guy stealing my identity.
I can't remember why I have scans of all my important shit backed up in anything other than google drive, that's where I messed up the biggest. they are surprisingly good scans too, possibly good enough for reproduction.
anyways let's hope this guy isn't a fucking dick and fucks up my life
heres a meme I found when going through my dropbox last night that got me kicked out of class in high school because I laughed so hard on the middle of class when I saw it on reddit:
[img]https://s-media-cache-ak0.pinimg.com/736x/50/d0/82/50d082dc57f53ec88dbb3d2e84e5bfd6.jpg[/img]
tbh if u aren't afraid of getting your car stolen and losing 10000$ is no problem what are u afraid of
mostly worried about this guy stealing my identity.
i mean u read the post
i mean u read the post
add a 1 to every password
or 2 at that maybe more secure
or 2 at that maybe more secure
FireI doubt that a random guy who Managed to get your passwords also knows how to make original looking copies of passports etc. except for the case that your default Username is istoremypassport@dropbox.com
he doesn't have to know how, he just has to know a guy who does.
he doesn't have to know how, he just has to know a guy who does.
Daggerunplug your internet and they cant hack you
while we're at it just throw away any electronics so they cant access your account
while we're at it just throw away any electronics so they cant access your account
1, Go get Lastpass, it is a password manager that supports making randomized passwords. I don't know if your comfortable with having your passwords stored on a web server but Its an excellent choice in my opinion. If you don't want them stored in on a server just use keypass.
Example of a randomly made password.
qSNgv3wh6Yt5
(No it isn't one of my passwords, just a random one I generated just now)
2. If you choose to go the Lastpass way put on 2 factor auth and choose a STRONG and different master password. For 2 factor auth I like authy since I can link it my phone number and have it backed up with an encryption password in case I loose my phone somewhere as long as I am able to transfer my number to a new phone I don't loose access to all my accounts.
3) Change all of your passwords that are affected along with any that have been used across multiple sites
4) NEVER EVER reuse passwords across different sites.
5) TURN OFF STORING PASSWORDS IN YOUR WEB CLIENT
Example of a randomly made password.
qSNgv3wh6Yt5
(No it isn't one of my passwords, just a random one I generated just now)
2. If you choose to go the Lastpass way put on 2 factor auth and choose a STRONG and different master password. For 2 factor auth I like authy since I can link it my phone number and have it backed up with an encryption password in case I loose my phone somewhere as long as I am able to transfer my number to a new phone I don't loose access to all my accounts.
3) Change all of your passwords that are affected along with any that have been used across multiple sites
4) NEVER EVER reuse passwords across different sites.
5) TURN OFF STORING PASSWORDS IN YOUR WEB CLIENT