Video Post: Nobody gives a shit about cyber security

Key Takeaways

• Security fails when it slows people down: Most cybersecurity advice is ignored because typing SMS codes and memorizing complex passwords creates daily friction.
• Habit 1 — Use a Hardware Security Key (YubiKey): A physical FIDO2 key plugs into your USB-C port and logs you in with a one-second touch—blocking remote phishing attacks even if an attacker steals your password.
• Habit 2 — Use a Password Manager: Never reuse a password across third-party websites. A password manager auto-fills unique 20+ character passwords everywhere so a breach at a local business never compromises your email or cloud console.
• Lock down your cloud & Workspace estate: Pair strong admin authentication with a structured Google Workspace Security Review and Google Cloud Security Review.

---

2 Low-Friction Steps That Stop Most Cyber Attacks

Step 1: Use a Hardware Security Key (YubiKey) for One-Touch MFA

Everyone tells you to turn on Multi-Factor Authentication (MFA), but pulling out your phone to copy an SMS code or authenticator app token every time you sign in is slow and annoying.

A hardware security key (such as a YubiKey, which costs around $100) stays plugged into your laptop. When prompted for MFA, you simply touch the key with your finger. It takes less than a second, and because an attacker on the other side of the world cannot physically touch your USB key, clicking a phishing link no longer hands over your account.

Step 2: Use a Password Manager to Eliminate Password Reuse

If you reuse one password everywhere and book a haircut on a local barber’s website that gets breached, attackers immediately test that same email and password against your corporate email, Google Cloud console, and bank.

With a password manager installed on your phone and laptop, you remember one master password (or unlock it with biometrics), and it generates and auto-types unique 20+ character random passwords for every single site—saving time while isolating third-party breaches.

---

Full Video Transcript

Nobody gives a shit about cybersecurity—honestly, nobody cares. I think partly it’s because the messaging is terrible: cybersecurity experts tell us what to do, but they don’t really explain why, and what they tell us to do is cumbersome and time-consuming. Hopefully I can fix that with two simple habits.

The #1 thing everyone tells us to do is enable multi-factor authentication (MFA). But every time you sign in, having to wait for an SMS code or open an authenticator app slows you down—it’s just annoying.

Introducing the hardware security key (like a YubiKey). Not many people talk about or use these devices. I plug this into my laptop, and every time I log in, I simply touch it—it takes a second. This means that anyone trying to hack me would need both my password and this physical key. If you accidentally click a link in a phishing email, an attacker might capture your password, but they are not going to get your physical hardware key. It is effortless to use and takes zero extra time.

The second habit is using a password manager. Everyone wants to have one password for everything because it’s simple. But let’s say you use that same password to book a haircut at your hairdresser. My barber is great at cutting hair, but he’s probably not a cybersecurity expert. If his booking system gets hacked, the attackers now have my email address and the password I use everywhere—and they’ll go straight from there into my email and my bank.

Using a password manager means I have one master password that unlocks my vault, and it auto-types all of my other passwords for me across my phone and computer. Every single site gets a unique, complex 20+ character string of numbers, letters, and symbols—and because it auto-fills, it actually saves me time.

Those two things—a YubiKey (which costs about $100) and a password manager—will stop the vast majority of account takeovers. And if you want a comprehensive cloud security audit or Google Workspace security review for your business, reach out to Aviato Consulting and we’ll happily help you lock it down. Thanks!