1. If you must
1.1. use a bank that has both
1.1.1. 2-factor identification
1.1.2. partial password entry
1.1.2.1. where the parts vary
2. not to allow phone requests to change account
2.1. AntiVirus
3. as soon as new version released
4. use a password manager
4.1. that doesn't store passwords online
5. Facebook
6. social media
6.1. Twitter
6.1.1. Settings: security & privacy
6.1.1.1. <= activate
6.1.1.1.1. Require personal information to reset my password
6.1.1.1.2. send login verification requests to my phone
6.1.2. attack attempted
6.1.2.1. new email address
6.2. Instagram
6.3. Wiki
6.3.1. update
6.4. blog
6.4.1. update
6.4.1.1. platform (e.g. WordPress)
6.4.1.2. plugins
6.4.1.3. theme
6.4.2. harden with
6.4.2.1. security plugins
6.4.2.1.1. WordPress file monitor
6.4.2.1.2. Limit login attempts
6.4.2.1.3. WP security
6.4.3. admin account
6.4.3.1. don't call it 'admin'!
6.4.3.2. don't post under this
6.4.3.3. post with an editor account instead
6.4.4. account name
6.4.4.1. should be different from publicly visible name
7. banking
7.1. Don't!
8. Sources: http://thenextweb.com/socialmedia/2014/01/29/lost-50000-twitter-username/ http://d.pr/n/KUMK http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-honan-hacking/all/ Initiated by Roy Grubb of The Visual Thinking Center http://www.mind-mapping.org/Visual-Thinking-Center.html
9. passwords
9.1. use strong ones
9.2. Don't re-use
9.3. Don't save in a spreadsheet or word document on your computer
9.4. Use a program like 1Password
10. Keep good backups
10.1. or you could lose everything
10.1.1. see how here:
11. Keepass
12. When on phone to support
13. test
14. could be used by attacker to 'validate' a request to change another account
15. not to allow phone requests to change account
16. All that's needed to get into this:
16.1. email address, billing address and the last four digits of a credit card number
17. free
17.1. gmail
17.1.1. mobile phone
17.1.1.1. 2-factor authentication
17.2. yahoo
17.3. etc.
18. PayPal
18.1. ask support
18.1.1. not to release any data by phone
19. Amazon
19.1. AWS account
19.1.1. if you have one
19.1.1.1. separate it from Amazon personal account
19.2. Amazon personal account
20. namecheap.com; enom.com
21. Apple
21.1. iCloud/ iTunes/ AppleID
22. Ask iCloud support
23. Ask Amazon support:
23.1. lock account
24. use more secure ones
25. use a private WHOIS to hide personal info
26. double check that they have your name right
26.1. on own domain
26.1.1. easier for you to control