Thread by @JBMagination

so with #wattpadhacked, literally everyone seems to be freaking out somewhat. here's how to generally secure your account, and i'll go into wattpad itself too.

FIRST, this doesnt just affect wattpad, this affects everywhere. most people use the same credentials everywhere. while this does make it easier to remember your password, it also makes it easier for hackers to access your account.

the most secure password manager i know of is masterpassword.app, although other great ones like @LastPass, @dashlane, and @1Password may work. generate (and save!) your passwords (excluding the password to access the password manager!) there.

don't use more than one manager, though!

SECOND, enable. 2FA. everywhere. i personally use @Authy but @Google Authenticator, and @LastPass Authenticator should do the trick for it. if you can enable both app-2fa and text-2fa, do that. if you can only enable text-2fa, do that.

be aware, though, that text-2fa (sms 2fa) is much less secure than app-based 2fa.

THIRD, check if you've been hacked in the first place. HIBP (HaveIBeenPwned) by @troyhunt is the best place to check this. haveibeenpwned.com. you've definitely heard of it. if not, how?

put your email in there and check if you've been hacked-- and also go to haveibeenpwned.com/Passwords and check if you've been hacked there.

keep in mind, this is public information! and you probably don't want everyone to know your account is in a data breach, so let's fix that.

first, head to haveibeenpwned.com/NotifyMe. enter in your email and click "notify me of pwnage". check your email and verify, then you can head to haveibeenpwned.com/OptOut. then, select "remove public visibilty". NOT "remove all breaches" or "remove email address completely".

this will hide this info from the public while allowing you solely to access the info via the pwnage notifications. if you don't want it to be stored at all, you can then select "remove all breaches". new breaches will still go through, but the old ones have been deleted.

"remove email address completely" removes all records of it, so if a new attack comes around, your email will be put back on record, and public again.

FOURTH, please, please for the love of all things good, CHECK YOUR GOOGLE ACCOUNT APPS. most people have added many apps that they don't use, however this imposes a huge security risk to your account. head to myaccount.google.com/security-check…, and choose "Third-party access".

"Remove risky access to your data" may be a concern, however for me it wasn't (e.g. Twitch and vidIQ I've used for years, some of my own apps, etc.). below that is "Show others". select that and you'll see a collage of apps. remove access to ones that you don't use anymore.

FIFTH, head to justdelete.me and if you see any accounts you don't use/will never use/simply want to remove, you can check if you can remove your account from said site. unfortunately, some accounts don't offer this ability, and others make it quite difficult to do so.

and now we're going to FINALLY get rid of info in the wattpad account.

SIXTH, clean your account. download your wattpad information. visit wattpad.com/settings/your-… on your computer or some sort of html viewer, and take a look at what it has on you.

if you can't see that, head to wattpad.com/settings/your-… and read it there. seriously. check what they know about you.

then, get rid of as much info as you can. blank gender, fake birthday, whatever-- anything you can control info wise, PLEASE change it.

if you're in california, you are blessed right now-- go into the mobile app and head to settings, and under Privacy & Safety, select "Do not sell my personal information". check the box that confirms you're a resident of california and then press the button to opt out.

fyi i'm not a resident of california but from pictures i've seen i think that's how it works!! if anyone in cali can confirm let me know :)

SEVENTH, secure. if you havent already, change your password dummy!!

unfortunately 2fa isn't a thing on wattpad as far as i'm aware (@wattpad please!!) and the password can only be up to 16 characters (why, wattpad?) but i'm pretty sure everything else is fair game!

that's all from me. if y'all like this i can do more. follows, likes, and rts are greatly appreciated. id recommend bookmarking this, you never know when you may need this again! okay but fr, take care. and as always, have yourselves a good one.

@threadreaderapp unroll

hey see the thread above you nerds #wattpadhacked #WattpadIsOverParty #wattpadbreach i put effort into this