First steps to keep your cryptos safe.

[nakamura12]

Try using https://keepass.info/ and this thread for creating strong passwords. https://bitcointalk.org/index.php?topic=5132378.0

If you enter the term "keepass hacked" in Google, or another search engine, there are many articles mentioning hacks and vulnerabilities of Keepass.

I have never used it but I dont like the idea that another software knows all my passwords.

You have a point there. Keepass password is possible to steal using a tool but I am thinking that if you run keepass in offline mode, would it still be the same?. I have the same reason why I didn't use a program to store my passwords and rather right my passwords in a piece of paper.

[USBitcoinServices.Com]

1. Use offline spreadsheets to register your accounts, use 1 raw for each account.

Can you expound more on what you actually mean by this? If you meant saving your login credentials on spreadsheets then that's definitely a big no.

The idea is to use offline spreadsheets, only if the device where you store your sensitive data is never going to be connected online ever!

[mk4]

Don't change your password too often.
Set up your password as strongest as possible, and stick with it. Don't change it regularly. Only change your passwords if you find risks.

I'd say change your passwords of your more important accounts(PayPal, banking, other finance stuff) at the very least once a year. Just to protect yourself from potential data breaches. And also of course, https://haveibeenpwned.com/

The idea is to use offline spreadsheets, only if the device where you store your sensitive data is never going to be connected online ever!

No. Air-gapped device or not, use password managers not spreadsheets. The extra layer of security from the encryption is essential.

[minairia3]

About passwords:

Don't change your password too often.
Set up your password as strongest as possible, and stick with it. Don't change it regularly. Only change your passwords if you find risks.

Is it more safer if we should always change password regularly. Especially if its related to more of our finance asset such as banks. Even apps using mobile devices are suggesting to do this.

I'd say change your passwords of your more important accounts(PayPal, banking, other finance stuff) at the very least once a year. Just to protect yourself from potential

Once a year isnt bad. But if your having too much accounts that are prone to breached isnt it safe to do it frequently such as quarterly.

[Rafael_Carrero]

"6. Keep a copy of your protected backup in different safe locations." - I wish I knew this recommendation in 2017. I lost a half of my funds because of my bad memory.

[OcTradism]

"6. Keep a copy of your protected backup in different safe locations." - I wish I knew this recommendation in 2017. I lost a half of my funds because of my bad memory.

No one can remember mnemonic seed in crypto or even with simpler stuff like passphrase. With passphrase, you can remember it if you regularly log in your wallet or your accounts. In contrast, if you stop log in your wallets or accounts (as you use to do) for a while, a couple of months, you will forget your passphrases.

Back them up and save them in safe locations where you can find them later.

[Magkirap]

"6. Keep a copy of your protected backup in different safe locations." - I wish I knew this recommendation in 2017. I lost a half of my funds because of my bad memory.

No one can remember mnemonic seed in crypto or even with simpler stuff like passphrase. With passphrase, you can remember it if you regularly log in your wallet or your accounts. In contrast, if you stop log in your wallets or accounts (as you use to do) for a while, a couple of months, you will forget your passphrases.

Back them up and save them in safe locations where you can find them later.

Indeed having a mnemonic phrase for keeping paraphrases will leads you towards losing your wallet or account, no matter how catchy your mnemonic is other thoughts will cover it so best is to have it written in multiple paper every month ang storing it in your cabinet or closet or anywhere you will remember. I am doing that now and so far its a relief for i know i can keep my wallets

[Subbir]

"6. Keep a copy of your protected backup in different safe locations." - I wish I knew this recommendation in 2017. I lost a half of my funds because of my bad memory.

No one can remember mnemonic seed in crypto or even with simpler stuff like passphrase. With passphrase, you can remember it if you regularly log in your wallet or your accounts. In contrast, if you stop log in your wallets or accounts (as you use to do) for a while, a couple of months, you will forget your passphrases.

Back them up and save them in safe locations where you can find them later.

I accept as true with you that we should always copy in every case That's why I usually use a notepad to guard my crypts. in order that if I forget later I can open the notepad and simply log in don't write of an internet site and it's likely to be hacked.

[OcTradism]

I accept as true with you that we should always copy in every case That's why I usually use a notepad to guard my crypts. in order that if I forget later I can open the notepad and simply log in don't write of an internet site and it's likely to be hacked.

Please don't use Notepad or spreadsheet to save your important things: private keys, mnemonic seeds, passwords. They are weakest in terms of security.

There are good softwares for use:
Keepass: https://keepass.info/
Another software: I don't remember now.

If you hesitate to use those softwares, you can save those things off-line. Make sure to check their correctness and re-useability after backup.

[USBitcoinServices.Com]

If you hesitate to use those softwares, you can save those things off-line. Make sure to check their correctness and re-useability after backup.

Good point, always the users need to test their passwords or private keys before sending funds to it. If there is any minimal finder mistake you won't be able to recover your coins, better to test and be sure it works as intended. And never send big amounts on the first tx, always test sending small tx, if all goes fine then send the intended amount. So far in crypto there is no way to reverse a tx.

[OcTradism]

Good point, always the users need to test their passwords or private keys before sending funds to it. If there is any minimal finder mistake you won't be able to recover your coins, better to test and be sure it works as intended. And never send big amounts on the first tx, always test sending small tx, if all goes fine then send the intended amount. So far in crypto there is no way to reverse a tx.

Losing money by using Ctr+C & Ctr+V and being unknowledgeable as well as lazy is very terrible.
How to lose your Bitcoins with CTRL-C CTRL-V. It is for bitcoin but you can apply it for your security (with passwords too). Many people don't check difference between what they copy and what they receive after pasting. Problems come from there.

[Sonu_titu]

About passwords:

Don't change your password too often.
Set up your password as strongest as possible, and stick with it. Don't change it regularly. Only change your passwords if you find risks.

I agree that don't use the same passwords for different accounts. It is also very important to don't reuse your passwords for same account.

It should be other way right? That one should change passwords once in a while so that it is safer.

One more point would be- do not keep same passwords for different accounts/platforms. If the password is compromised somewhere that can affect rest of your accounts.

[Sanugarid]

1. Use offline spreadsheets to register your accounts, use 1 raw for each account.

Can you expound more on what you actually mean by this? If you meant saving your login credentials on spreadsheets then that's definitely a big no.

The idea is to use offline spreadsheets, only if the device where you store your sensitive data is never going to be connected online ever!

This can really help because there are lots of online spreadsheets that can really be hacked because of some important information you have used and it is vulnerable since you are connected to the wireless area network or we can simply say internet. Once you are connected online, you should be careful of the things you are opening online especially websites, links, and ads. That can give the hackers information about you if that is really some suspicious link or website.

If you hesitate to use those softwares, you can save those things off-line. Make sure to check their correctness and re-useability after backup.

Good point, always the users need to test their passwords or private keys before sending funds to it. If there is any minimal finder mistake you won't be able to recover your coins, better to test and be sure it works as intended. And never send big amounts on the first tx, always test sending small tx, if all goes fine then send the intended amount. So far in crypto there is no way to reverse a tx.

This is also one of the things you should consider, this is obviously important but to remind every one of you, this can be great. Because sometimes we are forgetting to save private keys or passwords of your wallet. You should also double-check every information when you are sending funds because one simple mistake, that money cannot be sent to your specified wallet address.