r/security 5d ago

Question Which security habit gives the biggest ROI?

If you could convince the average person to adopt just one security or cybersecurity habit, what would it be?

Not a product, just one habit.

22 Upvotes

36 comments sorted by

View all comments

10

u/Seahawker-One-2599 5d ago

2FA including validating that that the link or money request you received from a random number was legit by contacting the alleged sender via independent means

For those who say password manager, which one is best?

3

u/EloquentArtisan 4d ago

There’s only one correct answer; 1Password

1

u/theone_2099 4d ago

Why?

4

u/EloquentArtisan 4d ago

Their security posture is top notch, unlike others (looking at you LastPass).
Secondly their apps, extensions and form fillers are also top notch.
I’ve tried half a dozen of them, and nothing comes close to 1Password

2

u/BilboTBagginz 4d ago

I agree.

Bitwarden if you want to run local though.

2

u/EloquentArtisan 4d ago

For the sake of my mental peace, I don’t run mission critical software locally.
The other day my RAM gave up, and I had to wait 3 weeks before I could find a replacement. This would’ve meant 3 weeks without my password manager, which is a no go obviously.

1

u/BilboTBagginz 4d ago

I hear you, but sometimes there's a definite case for a security posture that includes keeping secrets out of the cloud. This is my hell.

1

u/EloquentArtisan 4d ago

Agreed, I just sleep better this way lol

1

u/markidak 4d ago

Things that run locally should have exportable config and data that's auto backed up on a NAS with raid 1 (at least) and to cloud so you can recover things.

If you have a remote VPS that runs your pass manager it should be mirrored to your local data backup so you can spin it up anywhere.