BitcoinTalk security. How should I secure my account?

[stronghandsdeeppockets]

I keep seeing people getting their accounts stolen and I have absolutely no idea why. Sometimes paranoia kicks in, so guide me how to not have my shit hacked, how to sign a message with my btc address etc.(I've seen a thread regarding this and had no idea tf was going on there). I am looking for as much security as possible.

This could be also useful for others to know about.

EDIt: Is it worth using the secret question as a security measure?

[mk4]

• Don't use the same password as your other accounts on other websites. Preferably, use a password manager like LastPass[1] or KeePass[2]
• Use a password with a good length, for your account to be difficult to bruteforce[2].
• Make sure to run virus scans to be sure that you're device is free from malware/viruses. I suggest using MalwareBytes[4]

How to sign a message with Electrum: https://www.cryptocompare.com/wallets/guides/how-to-sign-a-message-with-electrum/

[1] https://www.lastpass.com/
[2] https://keepass.info/
[3] https://en.wikipedia.org/wiki/Brute-force_attack/
[4] https://www.malwarebytes.com/

[boyptc]

What wallet are you using? This guide made by shorena is perfect.
How to sign a message?!

Also this thread where you can post your address so if you are hacked, there's proof that you own the address.
Stake your Bitcoin address here

EDIt: Is it worth using the secret question as a security measure?

If it's your account here in forum, better don't use that feature. There's a bug and problem with it.

[jseverson]

To add: don't fall for phishing sites. It looks like there are a couple of mirrors floating around the internet, so you should make sure you're on the correct URL. Don't use Google; either type it out, or bookmark the correct site.

What about signing a message don't you understand specifically? shorena's guide linked by boyptc is already pretty thorough. If you're confused as to what signing messages are for, which most newbies are, basically:

1) You post an address you control the private key of (called "staking", emphasis on bolded part)
2) You use a software to sign a message with the aforementioned address. Whether or not the message was really signed with the staked address could be verified by anyone. (refer to shorena's guide)
3) If your account gets hacked, but you are able to sign a message with the address you staked, then it could be used to prove account ownership. You account is "paired" with that address after all, and unless the hacker also somehow got your private key, they wouldn't be able to create a signed message.

[Cluster2k]

To secure your account on the forum the only way is:

1) Set a STRONG password, i.e. at least 12/14 characters with alphanumeric, capital letters and special symbols.

2) Stake your Bitcoin address here: https://bitcointalk.org/index.php?topic=996318.0

3) Be aware of phishing websites, never insert your forum login info on other website which can steal your credentials.

4) It's recommended to use different passwords for different websites to avoid crossite credentials hijacking.

Stay safe, stay crypto.