Imran Riaz Khan is a fierce critic of the incumbent government with a massive following of 3.45 million people on his YouTube channel, thus enjoying a massive outreach. However, even his YouTube channel is not secure as it has been hacked for the second time in a few months, putting millions of people at risk of disinformation. The deteriorating cyber and information security situation in Pakistan is worrisome as it undermines the credibility and reliability of the modes of information and communication across the country.
Read More: Hacker posts news of Fazl-ur-Rehman death from Fawad Chaudhry account
Amid the rising threats to the cyber security of renowned YouTubers and journalists, OSINT Insider, an open source intelligence platform on Twitter, shares tips for influential YouTubers and Journalists to beef up the security of their YouTube channels and other social media accounts in a twitter thread.
First of all, Osint Insider suggests to use a dedicated and secret email address for YouTube channels as secrecy of the email address associated with a YouTube channel makes it less vulnerable to hackers. It is necessary that this email address is not shared with anyone because if this email address is revealed a YouTube channel can be hacked easily.
1) Use a separate / dedicated email address for your YouTube channel and don't use it for any other things.
Never reveal this email address to anyone. If it gets compromised, your channel will be hacked in no time.
— OSINT Insider (@OSINT_Insider) September 29, 2022
Secondly, the most important security measure is to enable two-factor authentication on the YouTube channel as well as on the associated email address. This is also a requirement by YouTube in order to monetize a channel.
Thirdly, Osint recommends to not use your phone number on your email or as a recovery option for your YouTube channel if you reside in Pakistan, as the One-Time Passwords sent on your mobile numbers can be read even before they reach you. This recommendation is particularly important for ‘persons of interest’ as they are usually under surveillance.
3) If you're in 🇵🇰, never use your phone number on your email address or your mobile number in recovery options for your email address or YT channel.
OTP sent by YouTube to your phone number can be read, even before it reaches you, sp if you're a 'person of interest'. IFKYK
— OSINT Insider (@OSINT_Insider) September 29, 2022
Furthermore, it is recommended to use only one dedicated device to access your YouTube channel instead of using random and multiple devices for the purpose. That dedicated device should be used for YouTube channel only and anything else must not be installed on it. This recommendation was emphasized by Osint Insider by mentioning it again at the end of the thread.
Read More: IPhones, iPads and Macs are at risk of being hacked, warns Apple
Osint Insider goes on to recommend that if you use Google Chrome browser, a dedicated chrome profile must be created on it and any extensions must not be installed on your browser. Moreover, it is necessary that no third party has access to your YouTube channel or the associated email address as doing so makes your channel vulnerable to hackers.
6) If you're using Chrome, create a dedicated chrome profile on it and never install any extensions on your browser.
7) Never provide access to any third party to your YouTube channel or the email you're using for it, even if that app isn't asking for any permission.
— OSINT Insider (@OSINT_Insider) September 29, 2022
For the YouTube channels operated by multiple admins, same security protocols must be adapted by all the admins. Strong password must be created to maximize security of your YouTube channel and email address and this password should be regularly changed instead of sticking with one permanent password. Also, the use of password generators is not recommended.
Read More: Phone and social media hacking complaints on rise in Punjab
Lastly, Osint Insider advises to not use public WiFi to access your YouTube channel, meanwhile it must be ensured that the WiFi you use is not public.
10) Finally, don't use public WiFi to access your YouTube channel. Also, make sure that your WiFi isn't public.
To emphasize again, keep a dedicated device for your YouTube channel. There should not by any other app / software on that device.
— OSINT Insider (@OSINT_Insider) September 29, 2022
All these tips are not just beneficial for the security of YouTube channels; they can help you secure all your social media accounts. “With hackers going wild, any slackness on your part can cost you a lot. These tips are very simple but will definitely save you from a lot of trouble”, Osint Insider concludes.
With hackers going wild, any slackness on your part can cost you a lot. These tips are very simple but will definitely save you from a lot of trouble.
Not just YouTubers, all of you must use these tips to secure your social media accounts as well.
— OSINT Insider (@OSINT_Insider) September 29, 2022