A best practice, which I want to share with you, according to the magazine yBitcoin, Volume 3 issue 2 for digital identity management. According to the writer, KIRK PHILLIPS, of the article Bitcoin Security, in the said magazine , there are seven golden steps:
Step 1: Choose Platform
Select a password management system such a lastPass or Secret Server, create an account, activate two-factor authentication and start adding website and login credentials.
Step 2: ADD Sites
Once the password manager is sated up, you can easily add sites by logging into an account as you normally would.
Step 3: Test Sites
Always go back and test-click the site after saving it whether you save sites one by one or import a list.
Step 4: Delete the Old list
After you’ve successfully transitioned from a password list it’s time to delete the file. If you set up a password manager and keep your old file then you have not reduced any risk.
Step 5: Create a Unique Email
Email is the golden thread that weaves your entire digital identity together, and unfortunately, most folks use the same email and the same or similar passwords for all their accounts, including social media, financial accounts and everything in-between. The email you use for communication should be different from the one you use for new account setup, a new account without using your own name or a word that could be associated with you.
Step 6: Change Passwords
Hackers can simply use brute force to break an easy-to-remember password. Change all of your passwords to the maximum password length allowed using the random generator provided with in the password management software.
Step 7: Secure Bitcoin Wallets
Bitcoin-related sites may require special attention beyond standard login credentials. Sometimes a passphrase, a group of random words, is required to access your bitcoins. If you lose the passphrase, you lose your bitcoins, period, so it must be handled very carefully.
In this case, the passphrase should be saved in the password field of the password manager. In some cases, risk management dictates keeping passphrase and private keys in a safe rather than a password manager.
There are many other advanced technique , but these strategies are meant to significantly reduce risk for people who would otherwise keep login credentials in a text file, spreadsheet, on post-it notes or in draft emails.