LastPass

What's the best 2-factor authentication app?

Episode 1490

Tom from St. Louis, MO
Authy

Tom heard that Authy is better than Google Authenticator. Is that true? Leo says that any authenticator will be better than no authenticator at all, especially when keeping password vaults protected. Most services offer 2 factor authentication now, but the danger there is that some SIMs can be duplicated or even hijacked with some creative social engineering. In fact, the authenticator can be re-routed. Authy sends a secret number and combines it with a time of day (hashing) that changes after 30 seconds.

Why doesn't my password vault input the right password?

Episoide 1473

David from Florida
LastPass

David uses a bunch of different browsers and everyone wants to save his passwords. It seems easier, but he says that it fills in the wrong password often. Leo says that's probably because David has multiple password managers and they are fighting. It's like antivirus software. It's best to have just one. Relying on the browser saving passwords isn't safe because that's not their main business and many have security flaws. David should use one password manager like LastPass, and it will input the right password.

How does 2-factor authentication work?

Episode 1472

Taylor from Cincinnati, OH
LastPass

Taylor is talking about using LastPass and its 2-factor authentication. How does that work? Leo says that 2-factor can be a biometric thing, like his thumbprint, or it can be an authenticator which will text him a code to his phone that he would input into the prompt. It's secret and only good for about 30 seconds before he would have to input a new code. It's a great way to protect online data.

Is there an Android app that could simplify the process of logging onto public Wi-Fi?

Episode 1457

Gary from Rancho Cucamonga, CA
LastPass on mobile

Leo says there's a new feature in Android Oreo 8.1 — it will let you know how fast a Wi-Fi access point is before joining it. Leo says any password vault should enter his password into the web portal when he signs in. Leo prefers using password vaults to any mechanism offered by the browser or phone itself. Password vaults will remember all of his passwords, and on Android, it will actually fill in the password automatically.

Has my Google account been hacked?

Episode 1415

Burt from Porter Ranch, CA
Google

Burt has a Motorola Max mobile device and an iPad. He got a notification to update his security and contact list on his phone, but the iPad gave him a notification that his Google password had changed without his knowledge. Leo says that's worrisome. It sounds like someone may have hacked his Google account. Leo advises going to iCloud.com to see if he can log in. If he can, then his AppleID is likely secure. But Leo advises changing the password again to verify everything.

What password vault should I use?

Episode 1414

Jason from Cooper, TX
LastPass

Jason wants to know if using a password manager on a mobile phone is a good idea. Leo says absolutely. It will keep track of all his passwords so all he needs to do is remember one. Leo likes Last Pass, but many iPhone users prefer 1Password. Both are equally good. There's also DashLane. Any of those three will do the job. He should just make sure he creates a difficult password to crack, but one that he can remember.

How can I remember all of my passwords?

Episode 1401

Andrea from Long Beach, CA
LastPass

Andrea's mother has problems remembering her passwords. What's the best way to do it? Leo says we all have a problem remembering them, and if it's easy to remember, there's a good chance it will be easily cracked. She'll want her password to be difficult, but by extension, that makes them difficult to remember. Writing them down isn't a bad idea as long as nobody has access to them. A password vault would be a good idea, where she would let the software generate all of her passwords and all she needs to remember is the master password.