The other half of access security.
WHY IT MATTERS
Your accounts are only as secure as the device you use.
WHAT TO DO
Keep the operating system updated Use a screen lock Use security software Avoid pirated software Encrypt the device, where supported
WHAT MALWARE TARGETS
Stored passwords Browser sessions FTP client credentials
THAT LAST ONE
FTP clients store passwords in files malware specifically looks for.
WHAT NOT TO DO
Log into business accounts from shared or public computers Save passwords in a browser on a shared device Leave devices unlocked
FOR PHONES
Same rules. Keep them updated and locked.
A phone with your authenticator and your email is a critical device.
IF A DEVICE IS LOST
Remotely wipe it, if possible Change passwords for accounts it accessed Reset two-factor where the device held it
IF A DEVICE IS COMPROMISED
Treat every credential on it as stolen.
Change them all from a clean machine.
