in light of the AI cyberattack mayhem going on right now, it's a good time to reshare Karapthy's Digital Hygiene guide
probably the most important thing you can read this week:
> use a password manager for every account
> set up physical security keys so attackers can't log in
> enable face id and fingerprint everywhere
> randomize your security question answers
> encrypt your hard drive
> get rid of unnecessary smart home devices
> switch to signal for private messaging
> use brave instead of chrome
> switch to brave search instead of google
> mint virtual credit cards for every purchase
> get a virtual mailing address
> never click links inside emails
> use a vpn on public wifi
> block ads and trackers at the dns level
> install a network monitor to see which apps are spying on you
We have a lot of new customers coming to us these days and we are committed to making the secure way the easy way. That’s an always on challenge. Thank you Cody.
It’s been a long time since I’ve had a non-ai product experience that felt magical.
I signed up for 1 password today and wow. It’s really impressive. Feels like magic.
Signed up after seeing the new agentic integrations.
@ajassy Thanks @ajassy - AWS has been an outstanding partner to us in helping reduce standing access and credential exposure, facilitate secure development for our joint customers, and to preserve and enhance our security model. Your commitment to security is critical and appreciated.
The internet is being hacked right now so I made this emergency video with 6 steps that you can take to secure your account right now:
1. Disconnect apps and agents you don't use
2. Use @1Password with watchtower
3. Turn on two-factor auth with the right app
4. Rotate or retire your API keys
5. Ask AI to update software packages
6. Don't trust breach emails or calls
I also share a prompt that you can use to get AI to audit all of the above in the video description.
📌 Watch now: https://t.co/GmuCum3BFc
PSA: in light of recent cyberattacks and vulnerabilities, I recommend everyone:
* use a good password manager (1Password) and do not duplicate passwords
* use two factor auth for everything important (not via sms!! Google Authenticator or better yet YubiKey)
* Auto-updates on, and restart weekly so they actually install
* Freeze your credit
* Get an IRS Identity Protection PIN
* Get your cell carrier to give you a port-out PIN or number lock that makes the carrier refuse to move your number without the PIN
You can ask your claude code to audit what on your laptop is out of date and needs updating.
I agree about the responsibility to educate those who will be caught off guard about the risks and the basics being called out here. For our part, we continue to invest in the use cases our secure vault can support. The rate at which we see credential compromise doing harm is exploding. The investment we have made at 1Password in developer tools and AI/ builder platform integrations are driving rapid adoption but so many remain exposed.
When we started investing in AI safety, we did it because we believed our customers and future customers would need us when these bills came due. When the cost to attack trends to 0, everyone becomes a target, and standing access is a massive hidden risk.
you have a moral responsibility to educate your family & friends on what is going on in cyber rn.
it is only going to get worse/weirder from here.
here’s a great starter todo list to share: