Safety · Guide

Passwords and 2FA

Most ‘hacks’ are reused passwords with better marketing.

Exchange hygiene that prevents the boring disasters.

Unique passwords. A manager. App-based or hardware 2FA over SMS when you can.

SIM-swap is a UK-relevant threat. SMS 2FA is better than nothing and worse than app 2FA.

Withdrawal allowlists add friction that saves careers.

Boring security is elite security.

opsecexchange