How to migrate from Google Drive to Nextcloud


In today's world, where most of our personal and professional life is conducted online, keeping our digital identity secure has become crucial. Passwords are the primary gatekeepers of our digital identities, and it is essential to manage them correctly to protect our sensitive data. In this post, we will discuss the best practices for password management to ensure your online safety.

1. Use Strong Passwords

   A strong password should be at least 12 characters long and include a combination of upper and lower case letters, numbers, and special characters. Avoid using predictable passwords such as "123456" or "password." Instead, use a passphrase, which is a sequence of random words, to make it easier to remember and harder to crack.

2. Use a Password Manager

   A password manager is a secure software tool that stores all your passwords in an encrypted format. It allows you to create and store strong passwords for all your accounts without having to remember them. Password managers also help you avoid using the same password across multiple accounts, which is a security risk.

3. Enable Two-Factor Authentication

   Two-factor authentication (2FA) adds an extra layer of security to your accounts by requiring an additional authentication factor, such as a code generated by an app or a fingerprint scan, along with your password. It is an effective way to prevent unauthorized access to your accounts.

4. Change Your Passwords Regularly

   Regularly changing your passwords helps prevent them from being compromised. It is recommended to change your passwords every 90 days. Additionally, if you suspect that one of your accounts has been compromised, change the password immediately.

5. Use Different Passwords for Each Account

   Using the same password for multiple accounts is a significant security risk. If one of your accounts is compromised, hackers can use the same password to gain access to all your other accounts. It is crucial to use a different password for each account.

6. Avoid Sharing Your Passwords

   Sharing your passwords with others, even with family and friends, is never a good idea. If you must share your password, create a temporary one and change it as soon as the other person is done using it.

7. Be Cautious of Phishing Scams

   Phishing scams are attempts to trick you into revealing your passwords and other sensitive information. Be cautious of emails or messages that ask you to click on a link or provide your login credentials. Always verify the legitimacy of the request before providing any personal data.

## Conclusion

Effective password management is crucial in keeping your online identity safe and secure. Use strong passwords, enable two-factor authentication, use a password manager, change your passwords regularly, use different passwords for each account, avoid sharing your passwords, and be cautious of phishing scams. By following these best practices, you can ensure that your digital identity is protected, and you can enjoy a safer and more secure online experience.


Best practices for password management


Ayam Secure Secrets (powered by Bitwarden) is a popular and user-friendly password manager that can help you securely store and manage your passwords.

One important aspect to understand is that Ayam Secure Secrets implements an open-source Bitwarden server where your encrypted passwords are stored in an encrypted database. You can access your passwords from various applications. When you access your passwords from the Web App, this Web App is served by Ayam Secure. You can also access your passwords using applications from Bitwarden, such as the Browser Extensions (which is highly recommended to get the most use out of a password manager), mobile apps for your phone from the app stores, and desktop apps.

So keep in mind that Secrets and Bitwarden refer to the same password manager.

### Here is a step-by-step guide to make the most use out of Secrets:

### Step 1: Create an Ayam Secure Secrets account

Before you can start using Secrets, you need to create a Secrets account. Vist the [Secrets service page](/services/secrets) and pick a subscription plan. After you checkout, follow the steps on the [how to get started with Secrets page](/secrets-get-started) to create your account.

### Step 2: Add your existing passwords to Secrets

The next step is get your existing passwords into your Secrets/Bitwarden password vault. Read this post if you're [migrating from 1Password](/posts/2022-11-migrate-from-1password/), this post if you're [migrating from LastPass](/posts/2022-11-migrate-from-lastpass/), and this post if you're migrating from Google <a href="https://bitwarden.com/help/import-from-chrome/" target="_blank">Chrome's password manager</a>. If you're importing passwords from another source, get help from the <a href="https://bitwarden.com/help/import-data/" target="_blank">Bitwarden help site</a>.

### Step 3: Download and install the Bitwarden Browser Extension Apps

To get the most use of Secrets/Bitwarden, download and install Bitwarden's Browser Extension App for your browser. Download the <a href="https://chrome.google.com/webstore/detail/bitwarden-free-password-m/nngceckbapebfimnlniiiahkandclblb" target="_blank">extension for Chrome here</a>, the <a href="https://addons.mozilla.org/en-US/firefox/addon/bitwarden-password-manager/" target="_blank">extension for Firefox here</a>, and <a href="https://bitwarden.com/download/#downloads-web-browser" target="_blank">for other browsers here</a>.

After it has been installed, click on the Bitwarden Browser Extension App icon, which is usually on the upper right of your browser.

![](/posts/post-78.png#image-center)

Before you login to your Secrets/Bitwarden vault, please change the Server URL by clicking on the dropdown arrow below the Email address input box, next to bitwarden.com and click on `self-hosted`.

![](/posts/post-75.png#image-center)

Enter this for the Server URL: `https://secrets.ayamsecure.com` and click Save on the upper right.

![](/posts/post-33.png#image-center)

Then you'll be back on the login screen. Ensure that below the Email address input box, it states: `Logging in on self-hosted`. Enter your Email address, check the box that says `Remember email`, and click Continue.

![](/posts/post-76.png#image-center)

Next enter your Master Password and if you have setup Second Factor Authentication on your vault (you definitely should), enter the passcode and then you'll be logged in to your vault through this Extension App.

![](/posts/post-77.png#image-center)

One of the great features of Secrets/Bitwarden is its ability to autofill passwords. Once you have added your passwords to your vault, you can use Bitwarden to automatically fill in your login credentials when you visit a website or service. Verify that this setting is enabled by first clicking on the Settings icon in the lower right of the Extension App.

![](/posts/post-35.png#image-center)

Then click on the first option under Manage: `Auto-fill`.

![](/posts/post-36.png#image-center)

And ensure that the Auto-fill on page load setting is checked, which is the default. While you're on this screen, also ensure that the `Default URI match detection` is set to `Base domain`. This means that if you saved a login's url as `https://account.google.com`, Bitwarden will show you this login if you're on any other `https://google.com` site.

![](/posts/post-37.png#image-center)

You can then click Back or click outside the Extension App to minimize it.

Now, visit a website for which you have a login saved and test out the auto-fill feature. If it doesn't auto-fill, simply click on the Bitwarden icon in your browser's toolbar and select the login you want to use. Bitwarden will then fill in your username and password for you.

### Step 4: Download and install the Bitwarden Mobile and Desktop Apps

You can install the Bitwarden Mobile app for <a href="https://itunes.apple.com/app/bitwarden-free-password-manager/id1137397744?mt=8" target="_blank">iPhone from the Apple App Store</a> and for <a href="https://play.google.com/store/apps/details?id=com.x8bit.bitwarden" target="_blank">Android from the Google Play store</a>. If you want, you can also install the Bitwarden Desktop App for Windows, MacOS, or Linux by visiting <a href="https://bitwarden.com/download/" target="_blank">this Bitwarden website</a> and clicking on the platform you are using. Follow the prompts to install the app.

### Step 5: Add new passwords to your vault

Now that your vault is set up, you can start adding new passwords to it. To do this, click on the `+` button in the upper right of the Bitwarden Extension app and select "Login" from the Type dropdown menu. Enter the website URL, username, and password for the website or service you want to add. You can also add notes to store additional information regarding this login credential and you can add this credential to a folder to help you organize your passwords. Don't forget to click Save on the upper right when you're done. You can edit your folders and add new ones through the `Web App` located at <a href="https://secrets.ayamsecure.com" target="_blank">https://secrets.ayamsecure.com</a>.

![](/posts/post-41.png#image-center)

### Step 6: Generate secure passwords

Another useful feature of Bitwarden is its password generator. This tool allows you to generate strong, unique passwords that are difficult to guess or crack. To use the password generator, click on the "Generator" button in the lower right of the Bitwarden Extension app and customize the settings as needed. Then, copy and paste the generated password into the website or service you want to use it for.

![](/posts/post-40.png#image-center)

### Step 7: Share passwords securely using Organizations

Bitwarden also allows you to share passwords securely with other users in your Secrets/Bitwarden Organization. [Read this article on how to use Organizations in Secrets](/posts/2023-02-how-to-use-organizations/).

In conclusion, Ayam Secure Secrets (powered by Bitwarden) is a popular and user-friendly password manager that can help you securely store and manage your passwords. By following the above guide, you can learn how to use Secrets to its full potential and keep your sensitive data safe and secure.


How to use Secrets Password Manager


Two-Step Login, which goes by many different names, is a highly-recommended security practice for securing access to websites and applications. Other names for this practice are Two-Factor Authentication (2FA), 2-Step Verification, and Multi-Factor Authentication. We'll use 2FA for the rest of this guide.

The main premise behind 2FA is that after you enter your password (the first step, method, factor, or evidence in proving your identity), you will be prompted to enter a token generated either by an Authenticator app, a hardware security key (like Yubikey), or sent via SMS (text message) to your phone. These days SMS is considered an unsafe method for sending the 2FA token due to the possibility that mailicious actors could intercept your SMS messages and thus gain access to your 2FA protected accounts. Most banks still use SMS as the 2FA token delivery method and hopefully they will upgrade their security practice soon.

Your <a href="https://ayamsecure.com/services/secrets" target="_blank">Secrets</a> password manager has a built-in Authenticator app that you can use with any website that supports Authenticator apps as a 2FA method. Not all websites support Authenticator apps, but if they do, then you should make use of the Authenticator app in your Secrets password manager.

This article will guide you in setting up Secrets as your Authenticator 2FA method for your Google account and Paypal account. After this, you should be able to set up Secrets as your Authenticator app for other websites, such as social media sites, financial sites, etc.

Enabling 2FA on your accounts at Google, Paypal and others will require you to complete a secondary step (entering the 2FA token generated in Secrets) each time you log in, in addition to your primary login method, which is your account password. When setting up 2FA on your various accounts, remember that it is best practice to set up multiple 2FA methods in case you lose access to one of your 2FA methods. You'll see that Google provides multiple 2FA methods that you can set up but Paypal only provides Authenticator app or the use of a Hardware Security Key, which is a more advanced 2FA method that we will cover in a future article.

### Guide to setting up 2FA on Google & Paypal:

Table of Contents:

- [Step 2: Set up 2FA on your Google account](#step-2-set-up-2fa-on-your-google-account)
- [Step 3: Set up 2FA on your Paypal account](#step-3-set-up-2fa-on-your-paypal-account)

---

### Step 1: Sign in to your Google Account

If you're already signed in to your Google account, like via Gmail, then click on your profile icon on the upper right and select `Manage your Google Account`. Otherwise, follow <a href="https://myaccount.google.com" target="_blank">this link to directly navigate to your Google account management</a>, where we will set up the 2FA methods.

![](/posts/post-140.png#image-center)

2FA set up in Secrets is best done via the Bitwarden Browser Extension apps or Desktop apps.

### Step 2: Set up 2FA on your Google account

From the Google Account page, select `Security` on the left sidebar and then select `2-Step Verification` under "How you sign in to Google".

![](/posts/post-122.png#image-center)

From the page that pops up, select `Get started`.

![](/posts/post-123.png#image-center)

Google first forces you to set up a phone number for SMS as a default 2FA method. So go ahead and do that. Enter your phone number and then enter the 6-digit passcode that Google sends to your phone.

![](/posts/post-124.png#image-center)

If it all looks good, select `Turn on`.

![](/posts/post-125.png#image-center)

And then you'll be back on the `Security` page and you can confirm that you have the default 2FA method set up. Next, we will set up Authenticator app as a 2FA method.

At the bottom of the 2FA section, select the button that says `Authenticator`.

![](/posts/post-126.png#image-center)

You can also navigate to the Authenticator app settings page by clicking once again on the right arrow at `2-Step Verification` and then selecting `Authenticator app`.

![](/posts/post-127.png#image-center)

From the `Authenticator app` page, select `Set up authenticator`.

![](/posts/post-128.png#image-center)

The page will initially only show you a QR code that you can scan with your Secrets mobile app but it's easier to do this with the Browser Extension app. Select `Can't scan it?`.

![](/posts/post-129.png#image-center)

Now you'll be presented with the `secret key` that we will save in our Secrets login entry for this Google account. Copy the string of letters and number in Step 2.

![](/posts/post-130.png#image-center)

Open your Bitwarden Browser Extension App, select the login entry for this Google Account, click on `Edit`, and then in the input box below `Password` labeled `Authenticator key (TOTP)`, paste the string of letters and numbers. This is the `secret key` that Secrets will use to generate unique one-time passcodes (OTP) that will match what your Google account is expecting when it prompts you for the 2FA token.

![](/posts/post-133.png#image-center)

After clicking `Save`, you'll see that the `Verification code` field starts displaying a 6-digit 2FA token (or one-time passcode) that refreshes every 30 seconds. Copy this code and paste it in the Google account pop-up view for setting up your authenticator app and click `Verify`.

![](/posts/post-134.png#image-center)

If it all looks good, you'll now see that you have set up Authenticator as a 2FA method for your Google account.

![](/posts/post-135.png#image-center)

Click the back arrow to come back to the 2-Step Verification page, which should now show you that the more-secure `Authenticator app` has been selected by Google as your default 2FA method with your phone being a backup 2FA method. We should set up one more backup 2FA method, which is generating and saving 2FA backup codes. Click on `Backup codes`.

![](/posts/post-136.png#image-center)

Select `Get backup codes`.

![](/posts/post-137.png#image-center)

And now you'll be presented with 10 one-time use 2FA backup codes. These codes can give access to your account if someone knows your password so guard these backup codes just like they were a password. We recommend saving these backup codes in your Secrets login entry for this Google account and logging in to your Secrets account from multiple devices to avoid getting yourself locked out. You could also print these backup codes and put them in a bank safety deposit box.

![](/posts/post-138.png#image-center)

Back on the `2-Step Verification` page you'll see that you have `Authenticator app` set up as your default 2FA method, then your phone number as your first backup and the 2FA backup codes as a secondary backup. Now this a robust 2FA setup because there are multiple 2FA methods set up on this one account and it is very unlikely that you would be locked out of this account or that a bad actor might gain access to your account.

![](/posts/post-139.png#image-center)

Let's see what a login flow would look like now that you have 2FA set up on your Google account. Sign out or logout of your Google account and then sign in again.

![](/posts/post-141.png#image-center)

Enter your Google account password.

![](/posts/post-142.png#image-center)

Then you will be prompted to enter a `verification code` from your authenticator app, referring to the login entry in Secrets for this Google account.

![](/posts/post-143.png#image-center)

In the Bitwarden Browser Extension App, search for your login entry for this Google account and click on the far right clock icon to copy the verification code or OTP to your clipboard. If you're curious why a clock icon is shown for this 2FA token, it's because this token is a Time-based One Time Passcode that refreshes every 30 seconds.

![](/posts/post-144.png#image-center)

Alternatively, click on the view icon of this login entry and then from the `Verification code` line, click the copy icon on the far right to copy the verification code to your clipboard. It's ok if the timer reaches zero and expires, you have a few seconds to enter the passcode before you'll need to enter a refreshed one.

![](/posts/post-145.png#image-center)

On the Google login vew, paste the `Verification code` and click `Next`.

![](/posts/post-146.png#image-center)

That's it! You've set up Secrets as your Authenticator app for your Google account and now your Google account is better secured from bad actors.

### Step 3: Set up 2FA on your Paypal account

Along with securing your Google account with 2FA, you should also enable 2FA on your financial accounts and other accounts that are important to you or even just any website that offers it as an option. As an example, here are the steps to set up 2FA on your Paypal account.

Login to your <a href="https://www.paypal.com/signin" target="_blank">Paypal account</a>, click the settings icon on the upper right, then select `Security`, and then click on `Set up` to the right of `2-step verification`.

![](/posts/post-113.png#image-center)

Choose `Use an authenticator app`.

![](/posts/post-114.png#image-center)

Below the QR code, copy the `secret key` string of letters and numbers.

![](/posts/post-115.png#image-center)

In your Bitwarden Browser Extension App, find your Paypal login entry, click on `Edit` and in the `Authenticator key (TOTP)` field, paste the `secret key` and click `Save`. Now copy the 6-digit verification code from the Bitwarden app.

![](/posts/post-116.png#image-center)

And paste it in the Paypal prompt and click `Confirm`.

![](/posts/post-117.png#image-center)

If it all looks good, you'll see that `2-step verification` is now turned on in your Paypal account. Paypal currently doesn't offer 2FA backup codes as a backup method and only offer setting up a hardware security key as a secondary 2FA method. We'll cover that in a future article.

![](/posts/post-118.png#image-center)

There you have it! You have now secured your Google account and Paypal account with two-factor authentication.

If you need further help setting up 2FA on websites, please don't hesitate to reach out and [contact us](/contact).


How to set up Two-Step Login on Google and other websites


The internet has become an essential part of our lives, and we use it for everything from online shopping to socializing with friends and family. But as we store more personal information online, the risk of our data being compromised also increases. The black market is a thriving marketplace for stolen data, and your personal information may already be available there. In this post, we will explore the risks associated with the black market and provide tips on how to protect your personal data.

## Is My Personal Data Available on the Black Market?

Unfortunately, the answer is most likely yes. Hackers and cybercriminals are constantly seeking new ways to steal personal data and sell it on the black market. According to a recent report by security company Norton, personal data such as email addresses, credit card information, and social security numbers are readily available on the black market for a relatively low price.

While it may be impossible to prevent your personal data from being stolen, there are steps you can take to reduce the risk of it being sold on the black market.

## How to Protect Your Personal Data

1. Use Strong Passwords

   One of the most important steps you can take to protect your personal data is to use strong passwords. Use a combination of upper and lowercase letters, numbers, and special characters. Avoid using easily guessable passwords, such as your birthdate or the name of a pet. Use different passwords for each of your online accounts.

2. Enable Two-Factor Authentication

   Two-factor authentication (2FA) provides an extra layer of security by requiring a second form of authentication, such as a text message or fingerprint, in addition to your password. This can significantly reduce the risk of your personal data being stolen.

3. Be Cautious of Phishing Scams

   Phishing scams are a common way for hackers to steal personal data. Be cautious of emails or messages that ask for personal information, such as login credentials or credit card numbers. Always verify the legitimacy of the request before providing any personal data.

4. Use a Virtual Private Network (VPN)

   A VPN encrypts your internet connection and hides your IP address, making it more difficult for hackers to steal your personal data. Use a VPN whenever you connect to public Wi-Fi networks or when accessing sensitive data.

5. Keep Your Software Up to Date

   Keeping your software up to date is critical in protecting your personal data. Software updates often include security patches that address known vulnerabilities. Make sure to keep your operating system, antivirus software, and other applications up to date.

## Conclusion

Your personal data may already be available on the black market, but by taking proactive steps to protect it, you can reduce the risk of it being sold or used for fraudulent purposes. Use strong passwords, enable two-factor authentication, be cautious of phishing scams, use a VPN, and keep your software up to date. By following these simple tips, you can protect your personal data and enjoy a safer and more secure online experience.


Is your personal data available on the black market?

Is My Personal Data Available on the Black Market?

How to Protect Your Personal Data

Conclusion

Read next

How to migrate from Google Drive to Nextcloud

Best practices for password management

How to use Secrets Password Manager

How to set up Two-Step Login on Google and other websites