February 1st is Change Your Password Day

No matter how diligently you plan for your financial future, chances are pretty good that you put your future at risk every day. If you are like me, you have online accounts that run the gamut, including logins to download music, purchase clothing, pay bills, communicate on social media, share documents or information and much, much more. Back when the Heartbleed security bug exploded in early 2014, we all had to take stock of our online accounts to change passwords for all the infected sites, and I realized how long my list of accounts had gotten. Couple the vast number of accounts with password security ranging from horrible to somewhat mediocre, and our risk is very scary.

According to CNN, half American adults were hacked in 2013 alone, and evidence indicates that situation is not slacking off. Looking at the list of biggest data breaches in 2016, there are some big names that can invoke real fear for those of us dependent on the Internet. A plethora of databases (from the U.S. Department of Justice and Internal Revenue Service to LinkedIn, Yahoo!, Weebly website design, Cisco and Wendy's) are all included. Yes, I did say Wendy's the restaurant chain, and there's no telling what 2017 has in store.

Back in 2012, Gizmodo declared February 1st to be "Change Your Password Day", which I think is a pretty good idea. Using a password manager can increase the security of your passwords by having them created via the technology itself rather than your brain and secures those passwords electronically; however, even if you choose an alternative method for keeping track of all your online accounts, it's probably been awhile since you've refreshed your passwords. Take action today and change your passwords!

How do you keep track of the logins and passwords for all your online accounts? Will you take time today to assign each online account a new, more secure password?

Utilize Automation to Do More With What Time You Have

While each day offers us only 1,440 minutes, beyond sheer strategy and proactivity, there are plenty of ways to make the most of what limited time we have. According to Dictionary.com, automation is "the technique, method or system of operating or controlling a process by... electronic devices, reducing human intervention to a minimum", which conveys the value of automation in that less of your direct human intervention opens up your time for addressing other functionality that cannot be done otherwise. Here are a few ways automation allows you to do more with your limited resource of time:

- Use cloud-based back-up for saving your files that matter. Computers crash. Fires can destroy all your devices. Emergencies happen, but you can be prepared with automated remote storage, saving you the time it takes to plug in a back-up device and safeguarding you from accidentally forgetting to do the back-up yourself. Simply "set it and forget it" with one of these options: Carbonite, Crash Plan or Mozy.

- Use a social media manager to share the right info at the right time. Whether you depend on Google+, LinkedIn, Facebook or Twitter, you must post the best message for your audience at the best time for that audience to receive it. While timing and messaging varies by platform, you still have other things to be doing; you can't stay planted by your computer all the time. Although there is controversy about their SEO impact, there are tools to help with the aforementioned issue as well as monitoring your business' social media results. Schedule messages to be posted on each social media outlet when you want via one of these options: Buffer, Hootsuite, Postling, SocialOomph or Sprout Social.

- Use a password manager for safekeeping your many different logins. As more of our work and play is conducted online, it becomes increasingly important to use a diverse set of strong passwords; however, as the list of passwords grows, the harder it is to remember them all. Further, the dangers associated with a printed list are frightening, whether it is losing that list, damaging that list or having that list fall into the wrong person's hands. Allow your brain to focus on thinking, rather than remembering, and rest assured that your passwords are safely secured in the cloud, instead of just a piece of paper. Employ one of these options for your password management: 1Password, Dashlane, LastPass, Roboform or SplashID.

- Use tools to manage your email, rather than letting email manage you. The average busy professional receives over 150 email messages each day. While "processing" emails is much more efficient than repeatedly "checking" emails, it still takes a good chunk of time to go through that many messages daily, let alone should you get behind at all. While there are plenty of technological tools designed to help, there are a few that rise above the competition. If you use Gmail, Boomerang allows you to send an email later, take messages out of your inbox until you actually need them, be nudged into following up at a specified time when there's no reply to a message you've sent and utilize email to remind yourself of what you think about needing to do while on-the-go. Alternatively, Mailbox lets you quickly swipe messages to your archive or trash, scan entire conversations in a chat-like view to more rapidly work through what messages have been received and bring messages back to your inbox when more appropriate for you to focus on what's important now. Finally, Mailstrom identifies which of your emails are related, groups them together for you to more easily process them quickly and empowers you to more succinctly unsubscribe from mailing lists you no longer desire.

- Put the Internet to work for you. It is very valuable to use all available options for helping business processes occur without your involvement, and there are several shining stars operating in this space. If This Then That integrates 152 different channels (or applications), each of which has its own options, allowing you to create "recipes" for a trigger action to lead to a resulting action. For example, you could use the trigger of "when I receive an email that has an attachment to my Gmail account" for the resulting action of "that attachment is added to my Evernote database" as a recipe. Plus, If This Then That is currently totally free... Happiness! Browse all the recipes currently being utilized by clicking here. Likewise, Podbox and Zapier expand the options for various channels or applications that can be integrated, but they can have fees.

How do you currently utilize automation? What benefits do you perceive could come from greater automation? Are there tools mentioned here that you will start to use?

Have You Considered Your Digital Afterlife?

 Today’s society is increasingly dependent on technology. With this dependence comes a growing online presence as well as all the data, documents and passwords associated with those online accounts… Most folks immediately assume that means just the various social media platforms on which each of us communicate. Yes, social media is included, but it’s so much more than that. In addition to websites, there are password-protected apps on your laptops and mobile devices. This includes your emails, online banking, shopping wish lists, loyalty programs, travel-booking sites, iTunes music libraries, bill paying, web-based photo albums, online file repositories, collaboration tools and more. Our digital footprints are scattered, and the list seems endless!

 Although each individual’s growing online presence can be a bit overwhelming while we are here on earth, have you considered what happens to your digital presence when you are no longer living? I think most folks would be shocked to learn that, under current law in many states, your heirs could be committing a crime by using what passwords you left them after you have passed away. Right now, it’s a legal gray zone… The US Computer Fraud and AbuseAct, created in 1986, makes it unlawful to “intentionally access” a computer without authorization and, then, obtain information from that access. Many propose that loved ones should get access to everything online immediately after one’s death unless otherwise specified in a will. Yet, as estate-planning lawyers have started battling to change this, it’s sparked quite a debate about who owns what on the Internet, who can access what in your digital afterlife and how to plan this transition.

Amidst all the confusion, though, there is good news… The Uniform Law Commission has created (and approved on July 16, 2014) the Uniform Fiduciary Access to Digital Assets Acts, designed to “let relatives access the social media counts of the deceased”, per NPR. This act overrides the terms of service of Internet companies who restrict account access to only the user and requires states to define details.

Still, gone are the days when whoever you designate to handle your estate can collect your mail for a few months to see all the accounts that need to be addressed… By not specifically addressing your digital afterlife, you risk issues with online bills or financials, loss of data (including sentimental items of photos, status updates, communications and more as well as items with monetary value, like music, movies, etc) and losing control of your personal legacy. However, how can you convey that applicable data to whichever personal representative you need handling it?!? Further, should your emails, digital photo albums and online accounts die when you do or can you pass them along to heirs as you do physical items, like a house, an automobile, stocks and prized possessions? While I am certainly not a lawyer and do not have all such expertise, I see the importance of addressing my digital afterlife and have been doing some research.

Where can YOU start and what can YOU do to address this situation? 

First, I recommend creating a digital estate plan. Like estate plans in the traditional sense, this would details your wishes about what you want done with what is yours once you are no longer living. Further, within this digital estate plan, appoint a Digital Executor, who is the person you designate to execute your wises for your digital assets. You’ll need to stipulate in your will that this Digital Executor should have a copy of your death certificate as proof for websites to take action.

Using a password manager to generate, save and autofill your many passwords would make life easier for your heirs. With one of these tools, the password manager’s password is the only one you must remember, protect and make available to your heirs. Plus, by using many of these, you can store vital documents (like your will) in a vault that's part of your password manager account. Great examples of a password manager that would help are LastPass, SplashID, 1Password, Roboform and Dashlane.

If you are uncomfortable with a password manager, as an alternative, you could utilize a password-protected memory stick or flash drive; however, storage of this device could prove tricky as there is often quite a delay before heirs are legally allowed to access your safe-deposit box. Therefore, if you choose the alternative of a password-protected memory stick, you’ll want to store that in a fireproof home safe.

Victoria Blachly, an estate-planning attorney with Samuels Yoelin Kantor in Portland, OR, recommends that you put all details about your online accounts in a VAIL or Virtual Asset Instruction Letter. Your VAIL should indicate which email or social media accounts to delete, conveying your wishes to your heirs for them to take the necessary next steps. Put a copy of your VAIL on a password-protected flash drive or CD, locking both the digital and hard-copy VAIL in a safe.

Further, with the aforementioned legal battles happening, it is very important to update your Power of Attorney document to include language specifically allowing your designated heir to access emails and other electronic data. If you’re incapacitated, this gives your designated person ability to manage your financial affairs.

As another alternative, there are online afterlife companies (or digital vaults) that pledge to store and distribute postmortem your designated digital assets, such as Cirrus Legacy, DeathSwitch, DeadSocial, Eterniam, IfIDie.org, PasswordBox, LivesOn, Planned Departure and SecureSafe. An assigned “digital heir” is provided your passwords once a valid death certificate and proof of the heir’s identity are received. Basically, they allow you to specify “beneficiaries” to receive information about your accounts once death is verified. However, I am extremely wary of these due to all the legal activity currently related to individuals’ digital afterlife. It’s a fluid situation right now, and I’m not convinced of these companies’ stability. Plus, what if you depend on a company for all of your digital data, documents and passwords but that company goes out of business?!?

An interesting substitute for the aforementioned online afterlife companies is Perpetu, which is a startup that was founded by an intellectual property lawyer and banker. You sign up for Perpetu with your email, Facebook or Twitter account; once logged in, you see a list of services you can add to Perpetu, including Facebook, Twitter, LinkedIn, Gmail, Dropbox, Flickr, Instagram and GitHub. For example, you can schedule a final wall post for your Facebook profile or tell Perpetu to email a download of your Facebook photos, status updates and private message to a selected someone. You can select repositories on GitHub to make public after you die or tell Perpetu to email a download of your LinkedIn contacts to a designated person. Unlike the online afterlife companies I mentioned earlier, Perpetu doesn’t ask users for their passwords; instead, you select what information is downloaded and sent to your contacts.

Websites want to honor their privacy agreements with users. Further, thus far, the legal system has made clear that its desire is to respect the wishes of technology users; however, unless you communicate your specific wishes, the courts and society in general can only guess, assume and infer what those wishes might be.

Assuming you are able to use a password manager or password-protected device to pass along to your heirs the data, documents and passwords associated with the accounts in your online presence, there are certainly many “next steps” to consider, particularly as different sites have various approaches to resolving your digital afterlife…

• -       Facebook: In January 2014, Facebook altered its digital afterlife policy to turn a deceased person’s page into “memorial mode” and make it publicly available, but shutting down a deceased person’s Facebook account requires the user’s birth certificate, death certificate and proof the person submitting the request is the lawful representative of that deceased user.
• -       Google: Google Inactive Account Manager allows you to choose a trusted contact who will be notified by email and phone when your account has been inactive after a specified length of time and who can also be given access to the Google accounts you choose.
• -       Twitter: In its website’s support area, Twitter offers a contact form to assist in deactivating, not transferring, the deceased’s account.
• -       Yahoo: In America, Yahoo accounts are nontransferable but can be terminated after submitting a detailed request; alternatively, in Japan, Yahoo has created “Yahoo Ending” to send an email the user has prepared to as many as 200 addresses and open a “memorial space” board for people to leave condolence messages.

The legal battle related to folks’ digital assets is complicated by many details. For example, certain online accounts can be worth real money, like a popular blog’s site or a gaming avatar that acquired significant status online. Further, some individuals would prefer that their social media profiles become “memorialized” rather than deactivated or deleted. All of this confusion and “gray area” are why it’s vital to communicate your wishes for your digital assets to your loved ones, especially whoever you designate to handle legalities.

Please start by taking some time to think about these items:

• -       What do you envision for your social media content after you die?
• -       What would you like to happen to your blog when you die?
• -       Do you want your Digital Executor to make an announcement online?
• -       Where would you like your obituary posted?
• -       Would you like a guestbook activated on your website?
• -       Would you like your website, blog and / or social media presence to turn into a virtual memorial when you die?
• -       Do you have a list of all websites on which you have a presence as well as the passwords for accessing those accounts? Where is it?

Expand your thought-process to cover all you can think of. Then, once you have a good feel for your wishes, please write them down and be sure to share them.

Want to see more about the items discussed here? You can view a recent interview I did with Julie Coraccio of Clearing the Clutter Inside & Out by clicking here, and stay tuned for an edited version of the video soon.

As you proceed in addressing your digital afterlife, you might find some resources helpful… Evan Carroll and John Romano have written Your Digital Afterlife to assist, and their website of TheDigitalBeyond.com provides many different strategies you can explore. Alternatively, social media and marketing consultant Adele McAlear offers DeathAndDigitalLegacy.com for more information. Investigating the Uniform Fiduciary Access to Digital Assets Act and how your state is moving forward on its approval will help to localize your actions. Plus, review this US Government blog post about creating a social media will. Finally, seeking advice from a lawyer in your region is most highly suggested.

Do you have a plan for your digital afterlife? Have you shared your wishes with a loved one? If not, what can you do now to prepare?

Options For Password Managers

If you're considering electronic storage of your passwords, here are some options that might meet your needs:

- LastPass (limited, free option or $12/year premium): With one, master password, you can log into websites via one click, auto-complete forms, securely store data & notes, synchronize across different browsers & devices and access your data from mobile devices while on the go. This solution works across all major platforms and has the added security of two-factor authentication.

- SplashID ($19.95 desktop + $9.99/mobile device): While this option provides multi-platform services similar to those of LastPass, it's a tad bit more complicated. If seeking more bells & whistles, try this one and see how comfortable you become with all that it offers.

- Roboform ($9.95 for first year; $19.95/year after): Full functionality of this option is limited to only Windows-based devices. Roboform has a relatively tricky set-up process for its installation. However, if you work primarily on a Windows-based PC, it's worth a try.

- 1Password ($49.99 for Mac OR Windows; $69.99 for both; $17.99 / iOS device): For some folks, it's a little concerning that your 1Password data is housed in Dropbox's servers; however, for most, the extreme cost of this option makes it most prohibitive. Either way, you get 1-click login for secure websites, easy online shopping checkout with credit card storage and instant syncing across your various devices. Currently, it is not available for Android devices so it's more Apple-focused.

- KeePass Password Safe (free for Windows PCs): This OSI Certified open source software offers a free alternative for those working solely on desktop PCs. While most others store your passwords in "the cloud", KeePass keeps them on your computer's hard drive, which is why they cannot be accessible remotely.

When comparing these options, what's most important is your comfort level with how well each particular tool fulfills the one-click logins and the tool's general layout. Therefore, I recommend you take advantage of each option's free trial and look closely at the online demos. Which password manager do you prefer?