I have long thought on a complete set of instructions/steps to do in order to rest assured that your accounts remain safe and you don't get scammed/hacked. This is a "work in progress" thread, meaning that I will update it as soon as I find newer and better ways of protecting oneself. So let's get it started.
1) Reserve a device (notebook, netbook, PC) only for trading/transfering/checking your accounts. Buy a new one or reinstall the operating system. Get the latest updates and the latest antivirus.
Here I recommend ESET Internet Security (link :
https://www.eset.com/us/home/internet-security/) . I costs only 50$/year/device. In my opinion, is a very decent price for the service that they provide. It has an awesome tools for online browsing. Forget about installing extensions such as MetaCert -> this tool does it all for you.
Don't install any other application on it. None. And if you do, verify it with the antivirus. Some wallets are viewed as viruses. I usually install it, save the private key and then uninstall it. Just to have the least apps installed as possible.
2) Reserve a new phone install Google Authentication app (or other similar apps) for two steps authentication. This is another mandatory layer of security that is really a must! Actually it is not if you believe in a protective god that works as the ultimate firewall for your computer.
Use it for every each account that you can. So far I haven't heard of somebody having their Google Authentication App hacked. Only stupid people that gave out that 30 seconds code have been hacked. Don't be like them. Don't ever give out to to anybody none of those codes. Ever.
Don't install anything but that app on the cellphone. The (more) Iphone, the better. Block all incoming calls. You'll only need it to receive confirmation messagges and to collect codes from Google Authentication (or likewise apps). Connect the cellphone only to secure private internet connections. Never to a public unsecure passwordless WIFI. Or use the personal internet of the SIM card.
3) Buy a new, fresh, prepaid SIM card to use with the new phone.
Do not disclose the phone number to anybody. Do not use to call or receive calls from anybody. That should be used only for your personal accounts as a security layer an nothing else.
There is a set of protocols called SS7 that can be used to intercept messages by only knowing somebody's phone number. Check out more details here:
https://vimeo.com/232678861/b1295b6384Check out also how high intel organisations can intercept our phones and ways to circumvent that:
https://en.wikipedia.org/wiki/IMSI-catcher4) Use a VPN to be as untraceable as possible. A very good one is Hideman ( link:
https://www.hideman.net/) You can benefit of 1 hour/day free or a full service for up to 69$/year.
5) Use COLD STORAGE such as Nano Ledger/Hardware that has been encrypted and password protected. If somebody stills it from you at least it can not access it.
Every each private key that you have save it on that USB stick. Actually, save it on more than one. If you loose one, at least you'll have the others.
Don't you ever save any of your private keys on online cloud storage such as Dropbox, Google Drive and so on.
Before I connect the USB stick, I usually close all the processes and restart the computer. You always want to check the processes from the TASK MANAGER to make sure that there is no filthy process that might read your data and compromise it.
6) Write your passwords and private keys only on a paper, notebook or multiple notebook that you will hide very very well. Do not save any password anywhere.
While you write them, make sure nobody is watching. Here is an interesting article on why you should tape/cover your PC/laptop's camera:
https://www.theguardian.com/technology/2016/jun/22/mark-zuckerberg-tape-webcam-microphone-facebook When it comes to talk about passwords, make sure they are as complicated and long as possible and also unique!!! In the worst case scenario, if one account gets hacked, at least the others will remain safe and you will be (almost) fine.
7) create a new email address that you will NOT link to any other email address or any other account that can be used to break into it. Remember Ian Balina being hacked?
"Learn from other people's mistakes. Life is too short to make them all yourself." Sam Levenson
These are my best pieces of advice used so far that have worked for me and kept myself safe. If you know more and better ways of protecting ourselves, please add up to this thread and let's make it the go to Bitcointalk page where people can learn how to keep themselves safe.
At the end I want to leave you with a link towards a BLOXPO Conference where RICHARD HEART had a great speech. He said also some great ways to protect yourself against hackers and ways that one can expose themselves:
https://www.youtube.com/watch?v=dHEGfxdUwIE&t=56mI will constantly update it as I myself find out more and more ways to stay away from hackers.
Stay safe!
