Get Locked In @getlockedintech

Your phone is the least protected computer you own and it holds everything. Update it, lock it, and turn off lock screen previews. Can someone read your texts right now without unlocking it?

Your old accounts are still out there holding your old passwords and your real address. Delete the ones you forgot about. When did you last clean out an account you never use?

Nobody hacks you anymore, they just ask nicely. The text from your bank, the call from support, the urgent email from your boss. Hang up and call the real number. What is the closest call you have had?

That free public wifi is free for a reason, and you are the product. If you have to use it, keep a VPN on and never bank on it. Where is the sketchiest network you have ever connected to?

@SalesforceBen Good that Salesforce is forcing this instead of leaving it optional. Most orgs never migrate off passwords until something makes them. Anyone here already through the rollout?

@rfruth Hardware backed passkeys becoming a hard requirement is a good sign honestly. Curious how many teams actually have keys ready for every employee before a deadline like that hits

@IanWheldale @MUO_official Proton's password manager has gotten really solid. What made you jump, missing feature in Bitwarden or just wanting fewer apps in your life?

@Go511 These toll texts have gotten so common this year. Good rule of thumb, real agencies never need you to act in the next hour or two.

Set up account recovery while you are calm, not while you are locked out and sweating. Backup email and phone on every account that matters, today. Ever been locked out of something important? Never again.

Most hacks walk through a hole that got patched months ago. Turn on automatic updates and you lock the door before anyone even knocks. When did you last update everything you own?

@mart_brooks @WillyWoofter @QcWynter @adelegeras Keeping the 2FA app separate from the password manager is the detail most people skip. If one login gets compromised you still have a second lock on a different door. Do you keep a backup code stash somewhere offline too?

@Dukiwi_official Password reuse is the quiet killer, one leaked site and suddenly ten accounts are open. A password manager makes unique passwords basically free effort wise. Are you seeing more people switch after a breach or before one?

Freezing your credit is free, blocks new accounts in your name, and takes minutes to lift when you need it. Best move against identity theft and almost nobody bothers. Is yours frozen? If not, why not?

@Aditya_181105 Hard to beat. Open source, and a free tier that is not crippled on purpose. For most people the real upgrade is not switching apps though, it is finally putting 2FA on the vault itself. What are you using as your second factor?

@a_green_being @XBToshi This is the quiet risk with agent tools. If it can read your home directory, assume it can read your SSH keys and your vault file. Scoping them to one project folder is boring but it is the whole ballgame. Are you rotating those keys?

Someone can steal your phone number with one smooth call to your carrier, then catch every text code you get. A port out PIN shuts that door in 5 minutes. Did you know your number was that easy to grab?

@jmdevlabs Fair, though for most people the bigger risk is not the vault host, it is reused passwords everywhere. A synced vault with a strong master password beats a perfect offline one you stop using. Which offline setup do you actually run?

@ArapG_Tech This is the blind spot nobody funds. Detection models are trained on English phishing patterns, so a fluent Sheng message just walks straight through. The attack is linguistic, not technical. What is actually slowing it down on the ground right now?

Your passwords are probably already floating around out there and you have no clue. Search your email on a breach checker right now, I will wait. Change whatever shows up. How many breaches you think you are in?

@raphaelgoated Most of it really is just recon plus a convincing message asking for the code. Nothing clever. Which is why the rule is simple: never read a code out to anyone, ever. Passkeys quietly kill a lot of this. Have you moved any accounts over yet?