Mastodawn

Question: I have an older relative whose Google account is compromised (phishing email from a known person whose account was also compromised, entered google password in a popup window). I walked them through going to the Google account page to change the password, but Google is preventing password reset for up to 72 hours, and won't even allow "forgot password" process to work. The actor appears to be actively emailing contacts with the same phishing email and replying to inbound emails. Any idea how to secure a personal google account when it won't let you change the password?

Separately, what is the recommended password manager for an iPhone for a non-techie person? I don't have an iPhone, so I can't directly evaluate the options.

Show thread

🆘Bill Cole 🇺🇦

@philvuchetich The greasy cat is correct…

On iOS, the integrated Passwords app is all you need. In fact, if all you need is secure passwords shared between Apple devices running a recent OS version, there’s no need to supplement it.
Unless you have very specific requirements for features that very few people ever use, there’s no reason to add the attack surface of a 3rd-party password manager.

https://infosec.exchange/@ajn142/116604444879349215

Buttered Jorts (@[email protected])

@[email protected] non-techie? Use Passwords, the one that ships with iOS. It’ll do what they need it to, and integrate well. There are plenty of better password managers, but none worth the effort IMO.

Infosec Exchange