Is Your Gmail Safe?

Arcanus 55
3 min readMar 12, 2019
Phishing and Keyloggers are real threats

Your Gmail account integrity is the weakest link in you privacy stack. If a bad actor gains access to your Gmail it could end your career. A few venomously worded emails under your name could irrevocably damage relationships that you’ve spent years building.

Can’t really put an accurate dollar amount on a destroyed reputation.

I point this out because I suspect people typically do not consider all of the implications of being hacked. Depending on what is stolen and by whom, the consequences could be dire. It can change your life in ways that you cannot even begin to imagine.

The actual cost of a compromised Gmail account is difficult to calculate. It depends upon to what degree you rely on email correspondence to conduct business and socialize. Your email history is probably a treasure trove of comments that taken out of context could be embarrassing.

Your email inbox in the wrong hands can grant access to your personal finances, business infrastructure, and social media personas.

Your Gmail account can be used to subsequently gain access to other more secure services. Because email is still being used by many in the “I Forgot My Password” scenario, it is feasible that a hacker could learn what services you use (Twitter, Stripe, PayPal, or AWS) from your history. Knowing that they could then exploit a weak 2FA (Two Factor Authentication) by simply clicking on the Reset My Password link in your email inbox.

The moral of the story is that your Gmail account is the linchpin that holds together your on-line privacy. So take special care to keep it secure.

The tech savvy are now taking a new approach to securing their Gmail accounts; The Advanced Protection Program. This solution uses a physical key to lock down your Gmail, Calendar and G-drive contents (including your priceless photos).

The Google Titan Key or Yubikey are just like the mechanical keys that you keep on your key-chain except they are digital devices. They require a bit more love and care. Losing or damaging a digital key (FOB) can have serious implications.

Titan Security Key / Yubico and Waterproof Capsule

I hope you would consider using a Titan key to secure your Gmail account, it’s relatively inexpensive and easy to use. I also hope that you take care to protect your key from loss or physical damage (coffee spill or washing machine). Stay safe!

Programmatic Prose

Disregarded gail
A new, shiny email key
because of the think

Keypad Encrypted USB Best Practices

Enter The PIN before inserting the USB into its slot. Do not enter the PIN while the Keypad Encrypted USB is connected.

Close all applications before hibernating, suspending, logging off or ejecting the USB device. This is an important step especially if you are using a software cryptocurrency wallet, KeePass or Key Quest Vault.

Put the USB Device back in its capsule when not in use. You should remember to seal the capsule and store it in a safe place.

Make sure your are not being watched or recorded by a surveillance camera. Be aware of your surroundings and look behind you.

Do not plug the USB into a suspicious computer. Avoid using a computer that may be infected with Spyware. If you must use an unknown computer, boot from a Trusted Operating System, and use the Virtual Keyboard to enter passwords.

Do not use a found USB device. If a USB drive magically appears do not plug it into any computer. Curiosity killed that particular cat. Be cautious if your USB drive was out of your possession for any period of time.

--

--

Arcanus 55

We vertically integrate the best of breed privacy platforms on behalf of the individual.