 If you're watching this there's a good chance using the same password over and over again And I'm here to tell you that is not a good idea Let me tell you what happened to me a few years ago Zappos let me out of nowhere and said that my password had shown up on a long list of hacked accounts It wasn't that Zappos had been hacked, I didn't even know it had been hacked But because I used the same password again and again my Zappos account was vulnerable. So was my Instagram account and my Facebook account and So before you end up with your password exposed to the world thanks to yet another security breach I'm going to show you how to start securing your accounts The most important thing you can do is use different passwords for different services It sounds really complicated and hard to remember but it's not. What you need is an app called a password manager Something that can remember all of your usernames and passwords and automatically plug them straight into websites They're really really handy and pretty easy to use once they get set up There are a bunch of options out there like 1Password and Dashlane But for this video we're going to talk about LastPass because it's completely free and it works on basically every platform Windows, Mac, iOS, Android, even Chrome OS So you'll be able to use it no matter where you are. When you sign up The first thing you'll be asked to do is create a master password This is what you'll type to log into LastPass and basically it's the only password you'll ever have to remember So you'd better make it a good one. Now I know you're thinking probably a special character, a capital letter, a number Maybe make that O into a zero. No forget all of that. Well you want something that's long but easy to remember So instead of password think passphrase something like Excitable lizard tomato paste machine. You're not going to forget that but it's gonna be really hard for hackers Guessing password after password after password to figure out. Okay, so what are the hackers actually doing here? We asked Russell Brand of the Verge cybersecurity reporter to find out So imagine a big breach like the one that hit Yahoo in 2013 Hackers got logins and hashed passwords for a billion accounts now That's a lot of people and it's a huge problem for everyone even outside of Yahoo Suppose you've got a scam going and you need to hack a bunch of Facebook accounts if you can buy unhashed Yahoo passwords on a Criminal marketplace you can use a tool like SentryMBA to run all 1 billion of those passwords against Facebook and see which of them work If you're lucky you get one in a thousand, but for a breach as big as Yahoo, that's a million passwords Of course Facebook will get suspicious if one computer is putting in millions of passwords a second So the programs get clever using botnets to spread the logins out over millions of IP addresses using different profiles and different browser Fingerprints so each one looks like a different user It's an arms race between hackers trying to use the passwords and services trying to stop them But at the end of the day the ones that work are legitimate passwords Services can only do so much to keep hackers out and that's why you want to use different Passwords with each account because even if you end up in a big breach like Yahoo your other accounts will still be safe All right So now you need to go about changing all of your passwords LastPass can actually help you out a bit by automatically importing any passwords You already have saved to your browser and even as a button to automatically change some of those passwords But it doesn't always work and you're probably gonna have to enter some of these manually which can take a little bit of time Say you're ready to secure your Facebook account You'll find the change password screen and then LastPass will have this little button appear with the corner of the box You just click on that and LastPass will be able to generate and fill in a big long complicated password for you That's okay, because you're never gonna have to remember it once saving LastPass It'll be there forever and that's it Fortunately, you don't have to do this all at once and honestly I'd recommend waiting a few days before you add, you know Your bank account or your email address just to make sure you have the hang of it Just you know It's gonna be a little bit more work on mobile because you're gonna have to copy your password out of the LastPass app and into Whatever you're signing into but it's worth the effort Okay, so that'll actually make you more secure than most but there's one more step you can do to make your accounts even safer It's called two-step authorization and you should set that up too Usually what this means is that when you go to log into a website The website will text a short code to your phone and you'll have to enter that code as well as your password to get logged in The idea is that even if a hacker has your password They'll also need to steal your phone in order to break into your account, which is gonna be a lot more work Yes, this will make logging in take a few seconds longer But it's much more secure and you'll feel a little bit like a secret agent every time you get a special code sent to you At least that's how I feel Some quick words of warning about all of this first of all never forget your master password Seriously, if you do you're gonna be locked out of everything some accounts will give you a backup code Make sure you hang on to those and even if you do take both of these steps You're never gonna be 100% impossible to hack. It's just not gonna happen Even two-factor systems can and are being breached, but if you take these steps You're still gonna make it much harder for somebody to get into your account when they're not supposed to and with more and more of our lives Moving online that's increasingly important and it's definitely worth the effort Keep going My Facebook account my Instagram account and
 If you're watching this there's a good chance using the same password over and over again
 And I'm here to tell you that is not a good idea
 Let me tell you what happened to me a few years ago
 Zappos let me out of nowhere and said that my password had shown up on a long list of hacked accounts
 It wasn't that Zappos had been hacked, I didn't even know it had been hacked
 But because I used the same password again and again my Zappos account was vulnerable. So was my Instagram account and my Facebook account and
 So before you end up with your password exposed to the world thanks to yet another security breach
 I'm going to show you how to start securing your accounts
 The most important thing you can do is use different passwords for different services
 It sounds really complicated and hard to remember but it's not. What you need is an app called a password manager
 Something that can remember all of your usernames and passwords and automatically plug them straight into websites
 They're really really handy and pretty easy to use once they get set up
 There are a bunch of options out there like 1Password and Dashlane
 But for this video we're going to talk about LastPass because it's completely free and it works on basically every platform
 Windows, Mac, iOS, Android, even Chrome OS
 So you'll be able to use it no matter where you are. When you sign up
 The first thing you'll be asked to do is create a master password
 This is what you'll type to log into LastPass and basically it's the only password you'll ever have to remember
 So you'd better make it a good one. Now I know you're thinking probably a special character, a capital letter, a number
 Maybe make that O into a zero. No forget all of that. Well you want something that's long but easy to remember
 So instead of password think passphrase something like
 Excitable lizard tomato paste machine. You're not going to forget that but it's gonna be really hard for hackers
 Guessing password after password after password to figure out. Okay, so what are the hackers actually doing here?
 We asked Russell Brand of the Verge cybersecurity reporter to find out
 So imagine a big breach like the one that hit Yahoo in 2013
 Hackers got logins and hashed passwords for a billion accounts now
 That's a lot of people and it's a huge problem for everyone even outside of Yahoo
 Suppose you've got a scam going and you need to hack a bunch of Facebook accounts if you can buy unhashed Yahoo passwords on a
 Criminal marketplace you can use a tool like SentryMBA to run all 1 billion of those passwords against Facebook and see which of them work
 If you're lucky you get one in a thousand, but for a breach as big as Yahoo, that's a million passwords
 Of course Facebook will get suspicious if one computer is putting in millions of passwords a second
 So the programs get clever using botnets to spread the logins out over millions of IP addresses using different profiles and different browser
 Fingerprints so each one looks like a different user
 It's an arms race between hackers trying to use the passwords and services trying to stop them
 But at the end of the day the ones that work are legitimate passwords
 Services can only do so much to keep hackers out and that's why you want to use different
 Passwords with each account because even if you end up in a big breach like Yahoo your other accounts will still be safe
 All right
 So now you need to go about changing all of your passwords
 LastPass can actually help you out a bit by automatically importing any passwords
 You already have saved to your browser and even as a button to automatically change some of those passwords
 But it doesn't always work and you're probably gonna have to enter some of these manually which can take a little bit of time
 Say you're ready to secure your Facebook account
 You'll find the change password screen and then LastPass will have this little button appear with the corner of the box
 You just click on that and LastPass will be able to generate and fill in a big long complicated password for you
 That's okay, because you're never gonna have to remember it once saving LastPass
 It'll be there forever and that's it
 Fortunately, you don't have to do this all at once and honestly
 I'd recommend waiting a few days before you add, you know
 Your bank account or your email address just to make sure you have the hang of it
 Just you know
 It's gonna be a little bit more work on mobile because you're gonna have to copy your password out of the LastPass app and into
 Whatever you're signing into but it's worth the effort
 Okay, so that'll actually make you more secure than most but there's one more step you can do to make your accounts even safer
 It's called two-step authorization and you should set that up too
 Usually what this means is that when you go to log into a website
 The website will text a short code to your phone and you'll have to enter that code as well as your password to get logged in
 The idea is that even if a hacker has your password
 They'll also need to steal your phone in order to break into your account, which is gonna be a lot more work
 Yes, this will make logging in take a few seconds longer
 But it's much more secure and you'll feel a little bit like a secret agent every time you get a special code sent to you
 At least that's how I feel
 Some quick words of warning about all of this first of all never forget your master password
 Seriously, if you do you're gonna be locked out of everything some accounts will give you a backup code
 Make sure you hang on to those and even if you do take both of these steps
 You're never gonna be 100% impossible to hack. It's just not gonna happen
 Even two-factor systems can and are being breached, but if you take these steps
 You're still gonna make it much harder for somebody to get into your account when they're not supposed to and with more and more of our lives
 Moving online that's increasingly important and it's definitely worth the effort
 Keep going
 My Facebook account my Instagram account and