Quote from: anshar on November 29, 2014, 09:23:34 AM

Quote from: BitCoinDream on November 28, 2014, 09:52:26 PM

Quote from: HYPERfuture on November 28, 2014, 02:56:14 PM

I've had enough of seeing people who have been hacked and lose coins on blockchain.info so here is a guide for beginners to make your coins 100% secure and safe from hackers.

1.) Use a gmail account with google auth 2FA to sign up for your blockchain wallet

2.) Buy a Yubikey (https://www.yubico.com/products/yubikey-hardware/yubikey-2/) and use this for 2FA to further secure your wallet at blockchain. You now have TRUE 2FA on both your wallet and your email account associated to the wallet. You can also recover the private keys to your blockchain wallet via email if you need to recover your wallet in future

3.) Do NOT lose your Yubikey or your google auth code. Back up your google auth code and Yubikey is virtually indestructible so take it everywhere with you and keep it safe.

4.) Do not have too many coins on blockchain.info. They have very good security but they may be internally hacked one day.

5.) For full security for beginners I recommend something like Trezor https://www.bitcointrezor.com/

Remember email is NOT 2FA as it is too easy for your email to become compromised. You MUST use TRUE 2FA like Yubikey at blockchain + google auth on email is a good combo. Even if you do get a keylogger on your PC your coins will be safe but always scan for viruses often and use a professional anti virus suite like Kaspersky.

NOTE: You can also use SMS 2FA on blockchain.info instead of Yubikey but I prefer Yubikey.

DISCLAIMER: This guide is based on my understanding of these technologies only and I cannot make any guarantees. However if you follow the steps above you will be MUCH MORE secure and protected from most vulnerabilities your average hacker will go for.

2FA is not the best way to secure your coins, especially if u r using SMS authentication.

Quote

Anyone using SMS based 2FA is just begging to have their BTC stolen; hackers can easily social engineer your telecom to forward your number.

Source: https://twitter.com/wiz/status/528806600941662209

But they would need to know your number in the first place.

How is this possible? Do sites state your number?

Social engineering is the way