Stop using 2FA text codes already

Today’s a short but super important security tip. If you’re still getting login codes via text on your phone, stop. That’s so 2010 and one of the biggest mistakes people make when it comes to online security.

Sure, it’s convenient. You type in your password, get a six-digit code via SMS, enter it, and you’re in. But here’s the problem: Hackers have figured out how to steal those codes.

Receiving that six-digit SMS code might feel like security … in the same way locking your front door but leaving the keys under the mat outside does.

It’s called SIM swapping. A scammer tricks your phone carrier into transferring your number to their device. Once they have it, they receive all your texts, including those security codes. Just like that, they can log into your accounts.

And if you have your devices set up like mine, where each one receives all your texts and emails, someone around you can easily access your accounts.

So, what should you use? Glad you asked.

An authenticator app 

You want to ditch texts and use an authenticator app. I recommend two free and trusted ones:

✅ Google Authenticator

✅ Microsoft Authenticator

These apps don’t send codes to you. They generate them right on your phone, changing every 30 seconds. Since nothing’s being sent over the airwaves, hackers or snoops can’t intercept anything.

Even better, these codes work offline. No signal? No problem.

Continue reading

Warning: Your tech expires soon

Your computer is behaving just fine, right? Opening apps, playing videos, checking email. Life’s good. But one day, without a single pop-up or beep, it’ll just … stop getting security updates. No ceremony. No goodbye. Just silence. From that moment on, it’s basically a digital sitting duck for hackers.

Continue reading

Must-haves for peace of mind

⚠️ Don’t say, “That won’t happen to me.” Cover all your bases.

  • 🖥️ No peeking, buddy: Keep prying eyes off your pixels with this privacy screen ($60). Easily slaps on and peels off.
  • Say cheese: Screw this security cam ($50) into any light bulb socket. Works with Alexa & Google Assistant.
  • 🚪 Stop right there: These door reinforcement locks (14% off) hold back 800 pounds. 4.7 stars and 1,100+ reviews.
  • Protect little fingers: Outlet covers (20% off, 38-pack) turn your plugs into no-go zones for curious kiddos.
  • 💧 Drip happens: Place flood leak alarms ($20, three-pack) near your appliances. Cleanup costs way less.

🛡️ Not done defending yet? Don’t worry. I’ve got a whole arsenal of security tools waiting for you. Click here to explore more.

🥳 Hooray! Take a peek at my Amazon store. I’ve handpicked some great finds just for you.

This makes your house an easy target

Open/download audio

Is your security system helping or harming you? If you’re doing these things, think twice.

📷 Alerts with context: Ring cameras can now use AI to describe what they see. Instead of “Living room: Motion detected,” you might get “A dog is tearing up paper towels on the rug.” The best part? It shows up as a phone notification, so there’s no need to open the video. Home Premium subscribers only ($20/month). At that point, just get a real security system.

15 to 45 minutes

The extra time you’ll need if your boarding pass says “SSSS.” That’s “Secondary Security Screening Selection” (paywall link) aka the travel world’s scarlet letter. Why? TSA flagged your travel as suspicious: Think last-minute bookings, one-way cash flights, certain countries, sketchy vibes or just random luck. Congrats, you’ve unlocked the VIP experience nobody asked for.

Biometric bandwagon: Unlock your Amazon app on your phone with your fingerprint or face. On the web, open Amazon account settings, click Login & security, then click Set up next to Passkey

Kim’s cart: 10 genius buys that keep you (and your stuff) safe

I test a lot of gear. Every product here solves a sneaky problem and helps you stay one step ahead of scammers, snoops and opportunists. I’ve done the digging so you don’t have to. Let’s go shopping!

Fraudsters love “washing” checks and rewriting new amounts unless you use this pen. Its ink chemically bonds with paper, so the info can’t be scrubbed off. Get Uni-ball 207 Gel Pens ($6.08).

Continue reading

The jobs AI can’t steal (yet)

Larry from Louisiana writes: “Kim, what jobs are safe from AI and don’t need a college degree? I’m losing sleep worrying about my future and how I’m going to support a wife and three teenagers.”

Larry, you’re spot-on to be thinking about this. Supporting a family of five in this economy is basically a full-contact sport. You’re also asking exactly the right question.

Continue reading

⚡️ 3-second tech genius: Let’s turn off ad tracking on your phone. On iPhone, open Settings > Privacy & Security > Tracking. For Android, go to Settings > Google > All services > Ads > Ads privacy.

Want real home protection without the hassle? I love this security system! No wires, no contracts, and setup takes just 30 minutes. It comes with sensors, cameras and 24/7 monitoring. Snag this deal while it lasts. For a limited time, get 50% off!

📞 Hackers love call centers: They’re bribing low-paid call center workers to bypass security (paywall link) and loot crypto wallets. Coinbase alone may be out $400 million. All it took was screenshots, Chrome bugs and $2,500 Venmo bribes.

🤖 OpenAI’s working with the Pentagon: The ChatGPT maker just landed a $200 million deal with the U.S. Defense Department. The goal? Use AI to tackle military and national security challenges. No, it’s not for weapons (yet). The focus is cutting paperwork and improving cyber defense.

Smile, you’re streaming: Change your cam’s default password. You can watch 40,000 live security cams like Netflix, no hacking required. From U.S. data centers, hospitals, random gyms and even residential homes, the internet of things just became the internet of oops. Most of the cams were accessible through a basic browser.

Android 16 is officially rolling out: Only for Pixel phones. But the biggest glow-up, the visual facelift of the Material 3 Expressive design, is delayed until later this year. So yes, security’s tighter. Battery’s better. But your lock screen still looks like 2021. 

🚨 AT&T data leak: Hackers just exposed 86 million customer records, including names, phone numbers, emails and addresses. Worse? Nearly 44 million Social Security numbers were leaked in plain text. That’s prime info for scammers and identity theft. PSA: Stay alert for phishing attempts and keep a close eye on your accounts, folks.

Help! My neighbor’s hacking me — June 7th, Hour 2

Open/download audio

Will from St. Paul, Minnesota, thinks his next door neighbor is out for revenge … jamming his Wi-Fi and security cams. What should he do next? Plus: China’s 1,000-mile EV, how to hide your Reddit posts, and unpaid toll text scams. Don’t miss it!

Lot cop unleashed: Walmart’s testing a security robot in its parking lots. It has wheels, cameras and apparently a dude behind the mic, whispering “Yo, what you say?” to shoppers. Is it surveillance? Art? Cyberpunk cosplay? Either way, the vibes are dystopian. Next up: R2-D2 with a gun.  

Disable Microsoft ads: Windows loves promoting its own services. To turn it off, go to Settings > Privacy & Security > Windows permissions > General, and toggle off all five options. Then go to Settings > System > Notifications > Additional settings, and untick Get tips and suggestions when using Windows.

🔒 Garage security trick: Thieves can hack garage door openers, but there’s a clever fix. Use a smart plug to cut power to the opener. It’s like two-factor authentication when you’re away. Here’s a four-pack ($21% off). Need to open it late? Just turn the plug back on with a voice command or your app.