Skip to content

What is a passkey and how to store it in NordPass?

As the digital world continues to expand and evolve, the need for secure authentication has become more critical than ever. Enter passkeys – a modern solution for secure authentication that provides a safer and more convenient way to access apps and websites. Today we will delve into the world of passkeys, explaining what they are, how they work, and why they’re the future of online security. Passkeys explained Essentially, passkeys are a new, more secure and convenient way to sign up for and access apps and websites. Cybersecurity experts tout passkeys as an authentication technology set to replace passwords. Tech giants such as Apple, Microsoft, and Google are working on passkeys and aiming to make their platforms and accounts password-free. The decision is also expected to be taken up by other members of the FIDO Alliance, which is the driver behind passkey technology, and other companies around the globe. When passkeys become the dominant authentication method, you will be able to sign up and access online services the same way you unlock your phone — via biometrics. No longer will you need to create, remember, and type out passwords. Sounds awesome? Well, because passkeys are seriously awesome. Let’s have a peek at how to use passkeys in the real world. Sign-up experience Say you need to sign-up for a new online service that supports passkeys. All you need to do is add your email or username and confirm the prompt to create a passkey. Here’s how the sign-up process works with passkeys:

Login experience
Now that you’re signed-up for an online service with a passkey, logging in is quick, easy and secure. All you need to do is tap the suggested passkey for that account and you are logged in.

How do passkeys work? 
Understanding passkeys and how this technology works can be somewhat tricky, mostly because passwords have been an integral part of our digital lives for so long. So first let’s recap the old and familiar before getting into passkeys. By the end we should understand the whole passkeys vs. passwords deal and why passkeys are the way of the future.

Password technology explained
Passwords — we know them all too well, and most of us have some idea of how they work. But let’s quickly recap.

Password-based authentication is relatively simple and straightforward. Say you create a password for a new online account. That password is then stored in an encrypted format on a server. When you use the password to access that account, the system compares the password you enter with the one in its database. If the two match — you’re good to go.

Simple, right? Well the catch is that this kind of user authentication presents quite a few serious security concerns. People tend to reuse simple and easy-to-crack passwords for multiple accounts, which is a hacker’s dream — crack a single account and you have access to a person’s entire digital life. Databases that store passwords can be breached. In fact, Verizon’s Data Breach Report notes that up to 80% of successful breaches are attributed to weak or stolen passwords.

Passkey technology explained
You can think of passkeys as a new and improved type of password. Both are used to verify a user’s identity upon sign up and login. However, the technology behind passkeys operates in a different way.

Whenever you sign up for an online service which supports passkey authentication, two keys are generated — public and private, both of which are used to authenticate the user when logging in.

The public key is stored in the website’s server, while the private key is stored on your device, whether it’s a phone, tablet, desktop, or laptop. Without each other the two keys are useless.

Upon logging in, the server sends a request to your device, and that request is then answered by a related passkey. The user’s identity is also verified on the device level via biometrics. Finally if the pair of keys match you’re granted access to your account.

Passkeys are widely considered to be a more secure and convenient form of authentication compared to passwords, as they reduce the risk of forgetting or reusing passwords. Passkeys are also resistant to phishing attacks as they can’t be stolen from your device by a third-party.

Store passkeys with NordPass 
All NordPass users now have the ability to store and manage passkeys in NordPass and use them to access apps and websites. NordPass syncs your passkeys across all of your devices as well as operating systems and enables you to safely share passkeys whenever needed. It is important to note that sharing passkeys is not as easy with alternative systems as it is with NordPass.

We’re excited to let you know that with the release of iOS 17, passkey storage is now available on NordPass app for iOS devices. This is a monumental step for us, ensuring that you, our users, enjoy a seamless experience across all platforms and devices.

In addition to mobile access, you can also reach your passkeys on NordPass via the desktop app, web vault, Firefox, and Chrome-based browser extensions. We’re also thrilled to share that support for the Safari extension is on the priority list and will be launched later this year.

Password managers are highly reliant on platform vendors when it comes to passkey technology. Therefore, we welcome the latest move from Apple because it serves as a huge milestone in replacing passwords with more advanced online authentication solutions. With tech giants allowing third-party integrations, internet users will get more user-friendly services and, as a result, will be more keen to stick to using passkeys

– Sorin Manole,

Product Strategist @ NordPass

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

It’s time to talk about cloud security

Reading about the cloud in 2023 has an almost nostalgic feeling to it, a bit like watching that HBO special for the 20th anniversary of the Harry Potter series. You suddenly realize how long it’s been since the whole conversation about cloud computing started.

The cloud has become such a common IT tool that today it is difficult to find an industry (or even a company) that does not use it to some extent. The chances are very high that you yourself are using it frequently.

So, we will not waste your time with generic information explaining the benefits and challenges of the cloud. Instead, we’ll get down to the nitty-gritty and discuss what’s really important — cloud data security.

First things first: What is cloud security?

Cloud data security could be explained as what organizations do to protect their cloud-based systems and applications — and the data they store in the cloud — against cyber threats.

You could also say that it is a set of strategies, procedures, and tools that, when properly applied, can help companies prevent unwanted data exposure or IT infrastructure damage caused by various internal or external factors.

Both explanations are correct. In fact, they complement each other and together provide more context — although they don’t give the whole picture.

Treating it more like a concept, we could say that cloud security is a complex and constantly evolving field in IT that requires attention from all organizations that have either fully or partially based their IT environment on the cloud. So, with that in mind, the question you may be asking yourself right now is…

Why is cloud security so important?

If we had to answer that in one sentence, it would probably be this: cloud security plays an essential role in ensuring the confidentiality, integrity, and availability of sensitive data stored in the cloud. But this only scratches the surface. So, allow us to elaborate a bit because there’s more to this matter than meets the eye.

Each year, more and more organizations start their digital transformation journeys and integrate cloud-based tools and services into their IT infrastructures. All of those companies — no matter if they are small businesses or large-scale enterprises — cannot afford to take any risks regarding the security of their digital assets.

This is why cloud security is one of the aspects that these companies must address if they decide to run even a tiny part of their activities in the cloud — or to keep their data inside one. If they don’t, they risk not only data loss or disruption of their business operations but also financial and reputational damage. They must be aware of the fact that keeping digital assets in the cloud doesn’t mean that they are unreachable to hackers.

This is to say that organizations should make every effort to ensure that their cloud cybersecurity is at the highest level at all times — after all, the success of their business endeavors depends on that.

Main risks associated with cloud security

Security issues in cloud computing often revolve around the potential for unauthorized access — but not only that. Below, you will find descriptions of some of the biggest threats that today’s companies must be aware of while developing their cloud security strategy. Whether a company will be able to address and manage these threats depends not only on the actions they take but also on its awareness of the emerging trends and disruptive forces shaping its industry.

  • Data breaches:

    Whenever an organization starts storing sensitive information in the cloud, it instantly becomes a target for cybercriminals — and they will try to find their way in. A successful breach could result in the exposure of the company’s confidential data including its financial records, customers’ personal information, or even intellectual property.

    In its “Cost of a data breach” report, IBM reveals that the global average cost of a data breach across all sectors in 2023 is almost $4.5 million — which is an amount that has increased by almost 15% over the last three years. This fact alone shows that companies cannot waste time, and they should introduce robust authentication mechanisms, encryption protocols, and access controls as soon as possible to protect themselves against this threat.

  • Insider threats and privilege abuse:

    It should be no surprise to anyone that employees with access to company data sometimes misuse their privileges or can be coerced into revealing sensitive information. This can lead to similar or even the same issues that arise due to data breaches.

    Hackers will use every vulnerability in security controls or protocols to gain unauthorized access to your systems and applications — and that is why companies must work on developing sound cybersecurity policies that, first, their employees will adhere to, and second, will help them mitigate the damage if one of their employees (whether intentionally or not) causes a potential cybersecurity threat.

  • Insufficient compliance with legal requirements:

    Cloud service providers often operate on a global scale, helping customers from different parts of the world where different sets of data protection laws and regulations apply. It’s no rocket science to point out that complying with these diverse legal requirements can be a challenge for both cloud providers and their customers.

    Non-compliance with the standards may lead to serious financial or reputational losses. Thus, businesses must carefully navigate the regulatory landscape and choose cloud providers that meet the relevant criteria.

Best practices in cloud security

Before we discuss any cloud security best practices, we would like to point out that cloud security as a whole is a continuous process and, therefore, you should stay informed about the latest security trends and practices so that you can protect your cloud environment more effectively. In other words, do not think of the following examples as the only elements you should pay attention to when creating a cloud security strategy. Instead, treat them as a starting point.

  1. Encrypt your data: One of the foundational pillars of cloud security is encryption, which is the process of using combinations of sophisticated algorithms to make sure that no unauthorized party can access your data — whether at rest or in transit. Some cloud service providers offer built-in encryption features, which you can leverage to keep your data secure at all times. If they are not available to you from the get-go, consider using third-party encryption tools to protect your sensitive information.

  2. Implement and use identity and access management (IAM) tools: To manage user access and permissions effectively, you must implement a strong IAM strategy. For example, by following the principle of least privilege, you can ensure that only authorized users with specific roles can access your systems, applications, and data. In other words, you can use IAM tools to provide the right people with access to the right resources — and only them. This will help you protect sensitive information from being compromised.

  3. Carry out audits regularly and monitor all cloud activities: You can stay ahead of potential security risks if you conduct frequent security audits. That way, you will be able to identify cybersecurity areas that require improvement and take necessary measures to address them before any security breach occurs. If you pay close attention to what’s going on in your network, you’ll be able to detect and respond to any anomalies or potential threats before they cause damage.

  4. Find out what your provider does to ensure cloud security: When teaming up with a cloud service provider, you should take the time to understand their shared responsibility model and all the security features they offer. In other words, you should get familiar with your provider’s security practices and security to, first, double-check if their approach aligns with your organization’s specific security requirements, and second, to ensure that your sensitive data and applications are adequately protected in the cloud environment.

  5. Backup your data: You can enhance your organization’s cybersecurity by consistently backing up your business data in a highly secure location and rigorously testing the recovery process. If you take this proactive approach, you will be able to, in the unfortunate event of a security breach or data loss, quickly and seamlessly restore crucial data and applications. Not to mention that it will help you minimize downtime, safeguard your reputation, and ensure business continuity.

How does NordLocker fit into the context of cloud security?

To adequately answer this question, we need to start with a brief explanation of what NordLocker is, namely an end-to-end encrypted cloud storage platform that allows you to securely store, manage, and share your business data with company members and partners.

NordLocker was designed to help companies — no matter the size, location, and nature of their business — protect their digital assets in a highly secure, state-of-the-art cloud environment to which only they have access. Therefore, it is more than fair to say that NordLocker was created with cloud security in mind.

Thanks to its wide range of features — from end-to-end encryption, through multi-factor authentication (MFA), to zero-knowledge architecture (and everything in between) — NordLocker covers all the cybersecurity practices we discussed in this article to help its users create a much safer online business environment. It can help you do that as well.

That’s why we encourage you to go to NordLocker and learn more about the platform and get a 14-day free trial. That way, you will be able to see for yourself if NordLocker is the right fit for your business and if what we’re saying is true.

Enjoy the ride!

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

How to change or reset your PayPal password

It goes without saying that you should protect all your online accounts with strong passwords. Data breaches, phishing attacks, and misplaced Post-it notes could all lead to stolen accounts. But when it comes to financial services, it’s particularly important to be careful.

How to change your PayPal password

PayPal is a quick and easy way to send and receive money. But since it is usually linked to your credit card, it’s important to change your password regularly and always use a strong one.

Please note that you can’t change the password through the PayPal app — you’ll have to log in through a browser.

Here’s how to change your PayPal password in four easy steps:

  1. Log into your PayPal account and click the little gear icon in the upper right corner.

  2. Click on “Security” in the top banner.

  3. Click “Update” in the “Password” field.

  4. Enter your current and new passwords and click “Change password.” All done!

How to reset your PayPal password

If you forgot your PayPal password, you can reset it through the browser and the PayPal app.

  1. Go to PayPal, click “Log in,” and select “Forgot password?”

  2. Enter the email address you used to create your account and click “Next.”

  3. Follow the instructions in the email you receive.

How to change your PayPal security questions

Please note that you can’t change the security questions through the PayPal app — you’ll have to log in through a browser.

Here’s how to change your security questions on PayPal:

  1. Log into your PayPal account and click the little gear icon in the upper right corner.

  2. Click on “Security” in the top banner.

  3. Click “Update” in the “Security questions” field.

  4. Select new security questions and write your answers. Click “Save” and you’re done!

How to set up a passkey for your PayPal account

Passkeys are a new and secure authentication standard introduced by the FIDO Alliance. Think of passkeys as a replacement for passwords that use your fingerprint, face, or a device PIN to sign in to apps and websites across the internet. Designed for supreme security and convenience, passkeys facilitate a seamless login process.

If you are interested in setting up a passkey for your PayPal account, here’s a quick rundown of how to do it:

  • Access your PayPal account using your existing username and passwords.

  • Once you access your account you will see an option “Create a passkey.”

  • Now you will need to authenticate via biometrics.

  • Once you’re authenticated, the passkey will be automatically created, and the next time you log in to your PayPal account, you will not need your username or passwords. The passkey will do the trick.

How to use PayPal safely

Using financial services online is convenient, but it can also be risky — there are many malicious actors lurking on the internet, trying to steal your money. Follow these simple tips to increase your security while making payments online:

Avoid making transactions when connected to public Wi-Fi. Hackers can set up fake hotspots and then monitor your actions online. Using a VPN will encrypt your connection, making it impossible for anyone to see the data you send and receive. You only need to be aware of snoopers looking over your shoulder as you type in your passwords!

Keep the PayPal app up to date. Apps can have vulnerabilities and bugs that are not discovered for months. But once they are brought to light, your account could be in danger. Set up automatic updates on your PayPal app to make sure you have the latest security patch installed.

Be cautious with links and attachments in emails. If you get an alarming email from PayPal claiming that your account is in danger and you must change your password immediately, don’t click any links. Open a new tab, enter the address manually, and check to see if your account is really in danger.

Enable two-factor authentication. Passwords are your first line of defense, but using 2FA will take your account security to another level. You can choose to receive a code via text or use an authenticator app or a security key for your PayPal account’s 2FA.

Set up passkeys. Passkeys are a new, passwordless authentication method that offer a more secure and convenient way to access websites and apps using only your fingerprint, face scan, or a device PIN. Because passkeys leverage public key cryptography, they are resistant to phishing attacks, making them even more secure than most multi-factor authentication methods.

Use a unique and strong password. When you change your password, pick one that is impossible to guess. That means using at least 12 characters that include upper- and lowercase letters, numbers, and special symbols. Need help? Try our password generator.

Keep your PayPal password safe with NordPass. Let’s be frank. All of us have way too many passwords on our hands. Remembering each one — well, that’s just an illusion. But with the NordPass password manager you can have all of your passwords securely stored in a single place, and you can autofill them with just a click. The same goes for passkeys — the NordPass Passkey Holder is designed as a secure storage for all of your passkeys. Tidy mess of online life with NordPass today.

Make using financial services online stress free with NordPass!

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

Single Sign-On: What it is and how it works

Nowadays, single sign-on (SSO) authentication is required more than ever. Many websites offer users the option to sign up with Google, Apple, or any other service. Chances are you have logged in to something via single sign-on today or at least this week. But do you know what it is, how it works, and why it’s used? Take a deep dive into the world of single sign-on and all things related to it.

What is SSO?

Single sign-on is a session and user authentication service that allows the user to use a single set of login credentials – namely, a username and password – to access multiple websites or applications. Put plainly, SSO allows users to sign up and access a variety of online accounts with a single username and password, thus making things a lot easier for the everyday user. SSO’s primary use is as an identification system that permits websites and apps to use the data of other trusted sites to verify a user upon login or sign-up.

Essentially, SSO puts an end to the days of remembering and entering multiple passwords. An added bonus is that SSO gets users out of the vicious password reset loops.

Additionally, SSO can be great for business, as it improves productivity, security control, and management. With a single security token (a username and password), IT professionals can enable or disable a user’s access to multiple systems, which in some cases mitigates cybersecurity risks.

So, how does the magical service work?

How does SSO work?

Single sign-on is a component of a centralized electronic identity known as federated identity management (FIM). FIM, or Identity Federation, is a system that enables users to use the same verification method to access multiple applications and other resources on the web. FIM is responsible for a few essential processes:

  • Authentication

  • Authorization

  • User attributes exchange

  • User management

When we talk about SSO, it is important to understand that it is primarily related to the authentication part of the FIM system. It’s concerned with establishing the user’s identity and then sharing that information with each platform that requires that data.

Fancy jargon aside, here are the basic operational processes of single sign-on:

  • You enter a website.

  • You click “Sign In with Apple” or any other service.

  • The site opens Apple’s account login page.

  • If you’re already logged in, then it gives the site your data.

  • You are logged in to your Apple account.

  • Apple’s site verifies that you are authorized to access the site.

  • If you’re authorized, the site creates a session for you and logs you in.

In technical terms, when the user first signs in via an SSO service, the service creates an authentication cookie that remembers that the user is verified. An authentication cookie is a piece of code stored in the user’s browser or the SSO service’s servers. Next time the user logs in to that same app or website using SSO, the service then transfers the user’s authentication cookie to that platform, and the user is allowed to access it. It’s important to highlight that an SSO service doesn’t identify the exact user since it does not store user identities.

What is an SSO Token?

An SSO token is a digital unit that contains data about a particular user such as their email address. The token is used to transfer user information from one system to another during the single sign-on process. For the recipient to verify that the token comes from a trusted source, it has to be signed digitally.

The SSO service creates a token whenever a user signs in to it. The token works like a temporary ID card which helps identify an already verified user. This means that when the user tries to access a given app, the SSO service will need to pass the user’s authentication token to that app so they can be allowed in.

Password security for your business

Store, manage and share passwords.

Get NordPass Business

30-day money-back guarantee

Single-Sign-On Costs

Because many of the SSO solutions currently available on the market are cloud-based, most of them are offered in a monthly subscription model. The price of a cloud-driven SSO solution designed for small and mid-sized businesses can range from $1 to $10 per user per month.

However, those that want to get an SSO solution designed for a big enterprise will need to either pay more each month or make an entry fee. Enterprise-grade solutions are usually more wide-ranging and require vendors to customize them to each of their client’s needs and requirements. Hence, the price difference.

Is single sign-on secure?

Yes. An SSO protocol is secure when implemented and managed properly and used alongside other cybersecurity tools.

The main benefit introduced by single-sign on with regard to cybersecurity is that, because it allows using a single set of credentials for multiple services, there are fewer login details to be lost or stolen. As long as the server is secure and an organization’s access control policies are established, a malicious user or an attacker will have little to no chance to do any damage.

However, this benefit could also pose a certain kind of risk. Since SSO provides instant access to multiple accounts via a single endpoint, if a hacker gains access to an authenticated SSO account, they will also gain access to all the linked applications, websites, platforms, and other online environments.

This issue can be easily mitigated by implementing an additional layer of security known as Multi-Factor Authentication. Combining SSO with MFA allows service providers to verify users’ identity while giving them easy access to applications or online platforms.

The benefits of SSO

Reduced password fatigue

With SSO in place, users only have to remember one password, making life a lot easier. Password fatigue is real and dangerous. SSO encourages users to come up with a single strong password rather than using a simple one for each account separately. It also helps users escape the vicious cycle of password reset loops.

Increased employee and IT productivity

When deployed in a business setting, SSO can be a real time saver. According to a recent report, people waste 16.3 billion hours a year trying to remember, type, or reset passwords. In a business environment, every minute counts. Thanks to SSO, users don’t need to hop between multiple login URLs or reset passwords and can focus on the tasks at hand.

Enhanced user experience

One of the most valuable benefits of SSO is an improved user experience. Because repeated logins are not required, users can enjoy a digital experience with less hassle. This means that users will be less hesitant to use the service. For any commercial web-based service, SSO is an essential part of their user experience.

Centralized control of user access

SSO offers organizations centralized control over who has access to their systems. In a business setting, you can use SSO to grant new employees specific levels of access to different systems. You can also provide employees with a single set of credentials (username and passwords) to access all company systems.

Top single sign-on solutions

Microsoft Azure AD

Microsoft Azure AD includes Active Directory Federation Services (AD FS) as an option to support SSO. Azure AD also offers reporting, security analytics, and multi-factor authentication services. It’s perfectly suited for any company that uses the Microsoft Azure cloud platform, no matter its size.

Okta Identity Cloud

Okta is well-established in the world of SSO solutions. They are open-source SSO leaders because of their flexibility and ease of use. Okta offers customizable open identity management in real time according to business needs, as well as two-factor authentication and a password reset functionality. Okta can serve the needs of multiple industries, from education and nonprofits to financial services and the government.

OneLogin Unified Access Management Platform

OneLogin is an open-source SSO provider that is often used for employee access to the company’s cloud-based applications. OneLogin is suited for a variety of IT administrator needs since it is designed to enforce IT policy in real time. It can also be updated according to specific needs if any changes occur, such as an employee leaving.

Idaptive Application Services

Idaptive is primarily suited for small to medium-sized businesses. Idaptive is capable of providing support to many users at once, thanks to their new cloud architecture. The company also offers adaptive MFA, enterprise mobility management (EMM), and user behavior analytics (UBA) all in a single solution.

Ping Intelligent Identity Platform

Ping offers services to large enterprises. The solution can serve anywhere between a few hundred to a few million users. Ping provides both on-premises and cloud options for deploying their solution. Additionally, the service comes with multi-factor authentication.

Does NordPass provide SSO?

Yes, NordPass does provide a single sign-on authentication! It can be set up via NordPass Admin Panel for users who want to log in to the NordPass app with their Microsoft Azure, Google Workspace, or Okta credentials.

This means that if you turn on Microsoft Azure Active Directory (AD), Google Single Sign-On, or Okta Single Sign-On, and invite new members who use one of these SSOs, they will be allowed to login in using their Azure AD, Google, or Okta SSO credentials — it’s as simple as that.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

Storage Beyond Passwords: Securely Save Files in NordPass

Ever been in that awful situation where you’re going through old emails or disorganized folders trying to find that one crucial document? The insurance form, an e-copy of your ID, or even a video detailing how to get into your new office? Wouldn’t it be a game-changer if you had all your important files right next to your passwords, credit card information, or secure notes?

Good news! Today, we are excited to introduce File Attachments — a new and improved way to manage important files with NordPass.

Best for large file attachments

Here’s a quick rundown of how it works. As a NordPass Premium user, you now have the ability to attach files to your saved items in NordPass. It’s not just about enhancing organization. This feature also provides an unmatched level of security. Forget the hassle of disorganized unsafe file storage. Any attached files or documents will be as secure as your passwords thanks to our encrypted storage.

But we didn’t stop at mere functionality. NordPass Premium now provides a whopping 3GB of encrypted storage per account, a giant leap forward. That’s not just more — it’s three times more than any other password manager out there! We’re offering you unrivaled storage and advanced security — and that’s certainly what we call more bang for your buck!

NordPass — The best password manager for large file attachments.

– Attila Tomaschek

CNET

No strings attached (except your files)

With NordPass Premium’s File Attachments, you have the freedom to store documents of any type to one of your existing items. Whether it’s a simple JPEG, PDF, MP4, or DOC file — NordPass supports them all.

Supported file types

The new feature allows for files up to 50MB in size and up to 50 attachments per single item. The only limit is your 3GB storage per user — and that’s a whole lot of space for your files.

While we aim at maximizing convenience, your security is always our top priority. To ensure maximum protection, we currently do not support attaching files to shared items or sharing items with files attached.

You can learn more about how to attach files to your NordPass items in our handy help center article.

Streamline your digital life with NordPass

In the digital age, we often juggle tons of files, documents, and data, and that can lead to a disorganized and chaotic personal digital space. With our new File Attachments feature, we look to help you take back control and streamline your digital life by allowing you to save documents in a quick and efficient way

With NordPass Premium, you can now attach important files to all your saved items. Store any file in one secure place with 3GB encrypted storage.

Instant access

When you’re in a hurry, having quick access to your important documents can make all the difference. That’s where File Attachments shine. Need to view a copy of your ID or an important receipt? No problem! With File Attachments, all your vital images or documents are just a few clicks away.

Effortless downloads

It’s not just about attaching and storing your files along with your passwords. It’s also about being able to retrieve them whenever necessary. Suppose you’ve stored financial documents that you need to share with your spouse. With File Attachments, you can quickly and effortlessly download these files directly from NordPass.

Unprecedented control

The File Attachments feature isn’t just about adding another functionality to NordPass. It’s about giving you greater control over your digital life. You get to decide what files to attach, what items those files are attached to, and when to download or delete them. You can also organize your vault in a way that best suits your personal or professional needs.

A single secure place for files and passwords

Take your password manager experience to the next level with NordPass Premium. Don’t just manage your passwords, manage your life. No more scrambling for documents, no more disorganized files, and certainly no more compromised security.

Your life. Your files. One secure place. Start your NordPass Premium journey today and make the most of our File Attachments feature.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

What Is a White Hat Hacker?

Did you know that not all hackers are bad? Most people associate the term “hackers” with cybercriminals who seek to steal data from people or companies. Make no mistake: these criminals are very real and dangerous. They’re also the ones who get the most media attention, so it’s no surprise that they’re the first ones to come to mind.

Well, believe it or not, hacking can sometimes be perfectly legal and ethical. To differentiate between the good hackers and cybercriminals, there are three so-called “hacker hats:” white hats, gray hats, and black hats.

White hat hacker definition

Have you ever watched those videos where people do drop tests on their phones or companies do crash tests on their cars? It’s important to know a product’s vulnerabilities, and the only way to do this is by putting it through the worst possible scenario. In the case of a business and its data, the equivalent would be a hack test, which is where white hat hacking comes in.

A white hat hacker (or ethical hacker) is someone who a company hires to test for security vulnerabilities. To do this, they perform penetration testing or pen testing in short. Pen testing refers to the simulation of repeated cyber attacks on a business’s systems. To represent real-life cyber threats as accurately as possible, pen testing should involve the same hacking methods that cybercriminals use (such as social engineering, viruses, worms, DDoS attacks, etc.).

So what are unethical hackers called?

Surely not all hackers are ethical. There are two other “hats” that refer to unethical hackers:

  • Black hat hackers. These are the ones who most people think of when they hear the term “hacker.” Black hat hackers are cybercriminals who hack into a system illegally with the goal of harming an individual or organization.

  • Gray hat hackers. These hack into systems illegally, but they generally don’t leak any data. They simply let the company know that their system is weak and that they should fix it. Gray hat hackers like to portray themselves as heroes because they’re helping companies improve their security. However, they act illegally and put company data at risk, making their heroic intentions questionable.

What are the main goals of hiring a white hat hacker?

So what is the point of ethical hacking? White hat hackers are hired by companies that want to enhance their cybersecurity and detect gaps in their systems. Here are the main goals that companies have when they hire ethical hackers:

  • Put themselves in the shoes of black hat hackers – a good white hack hacker will have the same expertise as many black hat hackers. This allows them to perform the same actions that a black hat hacker would if they were to attack a business.

  • Detect vulnerabilities in a company’s network – ethical hackers try out various hacking methods on a company’s network. When (and if) they’re successful, they report this to the company and let them know which vulnerabilities should be fixed.

  • Check how easy employees are to fool – white hat hackers might send fake phishing emails to employees to see how they react and whether they fall for them. This is a good way to see which employees need a refresh on their cybersecurity knowledge.

  • Help a business improve its cybersecurity – this is the ultimate goal of a white hat hacker. By detecting vulnerabilities in a company’s security, the ethical hacker can then make recommendations as to which areas should be improved. Educate individuals and encourage them to boost their own security online – ethical hackers can help individuals understand the risks of weak cybersecurity and learn the most common mistakes people make. For example, NordPass has partnered up with independent white hat hackers who performed research for the top 200 passwords used by individuals worldwide. This research aims to educate people on the worst passwords people use and the estimated time to crack them.

How to become a white hat hacker?

So who are these white hats exactly, and how does one become an ethical hacker? Obviously, you need to be a cybersecurity expert. This often means getting a degree in computer science, computer hardware engineering, database management, or similar fields.

Next, you should work in this field for a few years to get some practical experience. Then you can get an ethical hacker certification and start working as a white hat hacker.

Famous white hat hackers

Some of the most famous white hat hackers have made significant contributions to the field of cybersecurity and have become household names. Here are a few examples:

  • Kevin Mitnick – Mitnick is perhaps one of the most well-known white hat hackers in history. In the 1980s and 1990s, he gained notoriety for hacking into the computer systems of major corporations and government agencies. After serving five years in prison, Mitnick turned his life around and became a successful security consultant. His book “The Art of Deception” is a must-read for anyone interested in social engineering.

  • Tsutomu Shimomura – Shimomura is a renowned computer security expert who gained national attention in 1995 for helping the FBI track down and capture Kevin Mitnick. He also created the first intrusion detection system, which is still used today to protect networks from unauthorized access.

  • Dan Kaminsky – Kaminsky is a cybersecurity researcher who is best known for discovering a major vulnerability in the Domain Name System (DNS) in 2008. The flaw, which could have allowed attackers to redirect internet traffic to malicious websites, affected virtually all internet users. Kaminsky worked with major tech companies to fix the issue before it could be exploited.

  • Charlie Miller and Chris Valasek – Miller and Valasek are a duo of white hat hackers who made headlines in 2015 for hacking into a Jeep Cherokee and taking control of its steering, brakes, and other critical systems. Their research led to a recall of 1.4 million vehicles and sparked a national conversation about the security of internet-connected cars.

These are just a few examples of the many white hat hackers who have made significant contributions to the field of cybersecurity. By using their skills for good, they have helped to make the digital world a safer place for all of us.

What’s the difference between a white hat hacker and a black hat hacker

The primary difference between a white hat hacker and a black hat hacker is their intent and motivation. While white hat hackers use their technical skills to identify and fix security vulnerabilities, black hat hackers use those same skills to exploit and manipulate systems for their own gain.

White hat hackers are often hired by organizations to test the security of their networks and systems. Black hat hackers, on the other hand, operate outside the law and use their skills to gain unauthorized access to computer systems and networks. Their motives can range from financial gain to personal amusement or political activism.

It’s also worth noting that there is a gray area between white hat and black hat hacking, known as “gray hat” hacking. Gray hat hackers may identify vulnerabilities in systems without permission, but they do not have malicious intent and may disclose their findings to the affected organization. While their actions are technically illegal, they are generally seen as less harmful than those of black hat hackers.

Bottom line

White hat hackers can be an invaluable asset to a business. They help understand the main risks and vulnerabilities that a company faces and help businesses conquer the threat of their not-so-ethical counterparts: black hat hackers.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

What is the CCPA?

The California Consumer Privacy Act (CCPA) is a data protection law that came into effect on January 1, 2020. The CCPA is designed to give California consumers greater control over their personal information that is collected, received, used, shared, and/or sold (i.e. ‘processed’) by businesses. The CCPA is often compared to the European Union’s General Data Protection Regulation (GDPR) as it provides similar rights and protections to consumers.

The CCPA requires businesses to be transparent about their data collection and sharing practices, as well as to provide individuals with certain rights over their personal information, and to implement reasonable security measures to protect that information.

Today, we’re exploring CCPA. Let’s jump in right away.

Who must comply with the California Consumer Privacy Act?

The CCPA applies to businesses that operate in California and collect, and store with personal consumer data of California’s residents, and meet one or more of the following criteria:

  1. Have an annual gross revenue of over $25 million.

  2. Buy, receive, share or sell the personal information of 50,000 or more California consumers, households, or devices.

  3. Derive 50% or more of their annual revenue from selling California consumers’ personal data.

The CCPA also applies to businesses that control or are controlled by a business that meets the above criteria and share common branding.

What is the definition of personal information?

The CCPA defines personal information as any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

The definition of personal information by the CCPA may also include but is not limited to names, aliases, postal addresses,, email addresses, social security numbers, IP addresses, biometric information and other information that helps to directly or indirectly identify a person.

Data Covered by the CCPA

CCPA is designed to ensure that individuals are the ones in control of their data, and because of that the act defines the way business should process individuals’ personal information.

This includes information obtained from the consumer directly or indirectly, such as through a third party. The CCPA also covers information about a consumer’s household, such as their family members’ names and ages.

However, the CCPA excludes certain data, such as publicly available information, deidentified or aggregated consumer information, and data covered by other laws, such as the Health Insurance Portability and Accountability Act (HIPAA).

What are the CCPA Requirements?

  1. Right to know what personal information is being collected, used, shared and sold

  2. Right to request deletion of personal information

  3. Right to opt-out of the sale or sharing of personal information

  4. Right to access personal information in a portable and easily understandable format

  5. Right to non-discrimination for exercising their CCPA rights

  6. Right to correct Inaccurate Personal Information

  7. Right to Limit Use and Disclosure of Sensitive Personal Information

Businesses must also provide notice to consumers at or before the time of collection of their personal information. The notice must inform consumers of the categories of personal information that will be collected, the purposes for which the personal information will be used, and the categories of third parties with whom the information may be shared.

Furthermore, businesses must implement robust security measures to protect consumers’ personal information from unauthorized access, destruction, modification, or disclosure. On top of that companies are also expected to establish and maintain reasonable practices and procedures for responding and honoring to consumer requests.

H2: CCPA Compliance Checklist

Organizations subject to the CCPA should take several steps to comply with the law.

  • Conduct a data inventory to identify personal information collected, used, and sold.

    To meet CCPA requirements, organizations should conduct a thorough review of their data practices to identify the personal information collected, used, and sold. This inventory should include a comprehensive assessment of data sources, purposes for which the information is collected, categories of third parties with whom information is shared, and security measures implemented to protect information.

  • Update privacy policies to include CCPA-required notices.

    Organizations must ensure that their privacy policies are updated to include CCPA-required notices, which should be clear, concise, and written in plain language. The privacy policy must inform consumers of their CCPA rights, such as the right to access personal information, the right to request deletion of personal information, and the right to opt-out of the sale of their personal information.

  • Implement processes for receiving and responding to consumers’ requests.

    To comply with the CCPA, organizations must have effective processes in place for receiving and responding to consumers’ requests. These requests may include access to personal information, deletion of personal information, or opting-out of the sale of personal information. Organizations should establish procedures to verify requesters’ identities and respond to requests within the CCPA’s required timeframe.

  • Provide an opt-out mechanism for the sale of personal information.

    Organizations wishing to comply with the CCPA must provide a mechanism for consumers to opt-out of the sale of their personal information. This mechanism should be easy to use and prominently displayed on the organization’s website.

  • Train employees on CCPA compliance.

    To comply with the CCPA, organizations must train their employees on CCPA compliance, including a review of CCPA requirements and guidance on handling consumer requests. Employees who handle personal information must also receive training on security policies and procedures.

  • Implement reasonable security measures to protect personal information.

    Organizations must implement reasonable security measures to protect personal information. This includes physical, technical, and administrative safeguards to prevent unauthorized access, use, and disclosure of personal information.

  • Monitor and update compliance measures as necessary.

    To maintain CCPA compliance, organizations must continuously monitor and update their compliance measures as necessary. Among other things, this includes regular review and updating of privacy policies, employee training on new requirements, and ensuring that their processes for receiving and responding to consumer requests are effective.

What new law goes into effect beginning January 1, 2023?

In November 2020, California voters passed Proposition 24, the California Privacy Rights Act (CPRA). The CPRA is designed to amend and extend the original CCPA.

Not only does the CPRA expand consumer rights, but it also brings fresh rules to the table. The right to correction allows consumers to have incorrect information rectified while the right to limit sensitive personal information will give them greater control over their data in general.

Consumers can also request information on automated decision-making and opt-out of the use of such technologies.

The CPRA went into effect on 1st of January, 2023 and is now state-wide law.

Are there any penalties for violating CCPA?

Penalties for violating CCPA are very real. Businesses that fail to comply with the CCPA may face fines of up to $7,500 per violation. Consumers also have the right to bring a private action against a business that violates their CCPA rights.

What is the difference between GDPR and CCPA?

While the CCPA and GDPR share similarities, there are some key differences between the two laws. The GDPR applies to businesses that collect and process the personal data of individuals in the European Union, while the CCPA applies to businesses that collect and process the personal data of California residents only.

The GDPR also gives individuals more rights, such as the right to object to the processing of their personal data and the right to restrict processing in certain circumstances. The CCPA, on the other hand, gives consumers the right to opt-out of the sale of their personal information.

Another difference between the two laws is that the GDPR applies to all businesses, regardless of their size or revenue, while the CCPA only applies to larger businesses that meet certain criteria.

What does CCPA mean for cybersecurity?

In terms of cybersecurity, the CCPA has significant implications. Companies that collect and store personal information are required to implement reasonable security measures to protect that data from unauthorized access or theft.

Under the CCPA, companies can be held liable for breaches that occur due to their failure to implement reasonable security measures. This means that companies must ensure that they have robust cybersecurity policies, procedures and tools in place to protect consumer data. The CCPA also requires companies to conduct regular risk assessments and to update their security measures as needed.

Overall, the CCPA represents a significant shift in the way that companies collect, store, and use personal information and at the same time provides Californian consumers with greater control over their data. On top of that the CCPA holds companies accountable for protecting that data from unauthorized access or theft. As such, the CCPA is likely to have a positive impact on cybersecurity by encouraging companies to take their data privacy and security obligations seriously.

CCPA and NordPass Business

Organizations can ensure the security of personal information through the security measures that the legal act encourages to implement in order to comply with CCPA. One of effective security measures is a password manager such as NordPass Business. Password management is a crucial aspect of data security, and NordPass Business provides organizations with an easy-to-use, yet robust solution that can help them implement security measures needed to comply with the CCPA.

Firstly, NordPass Business can help you ensure that passwords across the organization are unique and complex. With the option to generate strong and unique passwords for each account, organizations can rest assured that their users’ accounts are secure.

NordPass Business allows organizations to securely share passwords. Sharing passwords can be a security risk, but in some cases, it is necessary for business operations. NordPass Business provides a secure way for organizations to share passwords, ensuring that only authorized users can access personal information. This feature is especially important for organizations that have employees working remotely or have multiple team members who need access to certain accounts.

By using NordPass Business to store passwords, organizations can demonstrate that they are taking measures to protect their users’ personal information.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

How to reset your forgotten Zoom password

In today’s world, Zoom has become an essential tool for both personal and professional communication. Whether you’re conducting a virtual meeting with colleagues or catching up with friends and family, Zoom is the go-to platform. However, with so many passwords to remember, it’s not uncommon to forget your Zoom password. If you’re in this situation right now, don’t worry – resetting your forgotten Zoom password is a straightforward process.

In this article, we’ll guide you through the steps to reset your Zoom password, answer frequently asked questions, and provide tips to keep your passwords secure.

How do I change my Zoom password?

Before we dive into resetting a forgotten Zoom password, let’s look at how to change the password. Changing your Zoom password regularly is an essential security measure, especially if you use Zoom for confidential meetings. To change your password, simply follow these steps:

  1. Log in to your Zoom account on the web portal.

  2. Click “Profile” in the left-hand menu.

  3. Scroll down to “Password” and select “Edit.”

  4. Enter your current password, followed by a new password.

  5. Click “Save changes.”

You’re all set now.

How do I reset my Zoom Password?

Resetting your Zoom password is not that much different from changing it. Here are the steps to reset your forgotten Zoom password:

  1. Open your browser and go to zoom.us/forgot_password.

  2. Enter the email address associated with your Zoom account.

  3. Verify the reCAPTCHA.

  4. Click “Send” and wait for the reset password link to arrive in your email inbox.

  5. Check your email inbox for an email from Zoom with a link to reset your password. If you can’t find the email in your inbox, check your Spam folder.

  6. Click on the link in the email.

  7. Enter your new password.

  8. Enter it again for confirmation.

  9. Click “Save.”

  10. You have successfully reset your password and can now log in to the Zoom web portal.

Can I get into a Zoom meeting without a password?

It is possible to set up a Zoom meeting without a password, and it’s also possible to join a meeting without a password.

However, if you’re hosting a Zoom cloud meeting, it’s essential to set up a password to protect your meeting from unwanted guests. Without a password, anyone with the meeting ID can join your Zoom conference, which can lead to unwanted interruptions or something far worse — actual security breaches.

You can set up a Zoom meeting password by navigating to the Zoom website and logging into your account. From there, you can schedule a new meeting and enable the “Require meeting password” option. This will generate a unique password that you can share with your participants to ensure secure access to your meeting.

FAQ regarding a forgotten Zoom password

How to reset a password for a user in your account

If you are a Zoom account administrator and need to reset a password for a Zoom client user in your account, follow these steps:

  1. Log in to the Zoom website.

  2. Click on “User management” in the left-hand menu.

  3. Click on the user’s name.

  4. Scroll down to “Password,” and click “Edit.”

  5. Enter the new password.

  6. Click “Save changes.”

The user will receive an email with the new password.

I can’t reset my password on Zoom

If you are having trouble resetting your Zoom password, there are a few things you can try. First, make sure you are entering the correct email associated with your account. If you are still having trouble, try clearing your browser cache and cookies, and then try resetting your password again.

I didn’t receive a confirmation email

Sometimes, you may not receive the confirmation email from Zoom. This could happen for a variety of reasons, including issues with your email provider, spam filters, or incorrect email address. If you don’t receive the confirmation email within a few minutes, check your spam folder to see if it was mistakenly marked as spam. If it’s not in your spam folder, try requesting another email by clicking on the “Resend confirmation email” button on the Zoom website.

What should I do if the link has expired?

If you clicked on the reset password link in the email and it has expired, you will need to request a new one. Go to the Zoom website and click on the “Forgot password” button. Enter your email address, and then click on the “Send” button. Zoom will send you a new password reset link via email, and you can click on it to create a new password. Make sure to reset your password as soon as possible after receiving the link to avoid it expiring again.

Keep your Zoom password safe with NordPass

In today’s digital age, passwords are an integral part of our daily lives. From online shopping to social media and beyond, we rely on passwords to keep our personal information secure. However, with so many different accounts to manage, it can be challenging to remember every login detail. That’s where a password manager such as NordPass comes in handy. NordPass is a secure and user-friendly password manager that can help you store and manage all of your passwords safely in one place.

With NordPass, you don’t have to worry about forgetting your Zoom password ever again. NordPass securely stores passwords, credit card details, personal information and secure notes in a single place. What’s great about this is that you can easily access your Zoom or any other password from any device using the NordPass app. Everything you store in NordPass is secure thanks to advanced encryption technology.

On top of all that NordPass makes the online experience much more enjoyable. Thanks to autosave and autofill, you will no longer need to worry about coming up with passwords or manually typing them whenever you want to access one of your online accounts. Give NordPass a try and get peace of mind online.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

New Desktop Experience: Faster, Smoother, Better

Over the past few months, we’ve been working behind the scenes to create a new and exciting browser extension experience that will allow you to enjoy everything that NordPass has to offer without needing to launch the desktop app.

Yes, you read that right. Sounds awesome? Well, take a look at what the new NordPass browser extension experience brings to the table.

Why this release?

For quite some time, you — our users — have been letting us know that you’d really love a standalone NordPass browser extension — a way to manage your passwords, passkeys, payment card information, and personal information straight from the browser, allowing for an even smoother online experience.

A whole lot of Chromebook users were at the forefront of voicing their needs. And we’ve heard you loud and clear — today is the day that you can finally start using the standalone NordPass browser extension on your Chromebook and enjoy everything that NordPass has to offer.

A smoother, simpler experience

Here’s a what the standalone NordPass extension offers:

  • Frictionless online experience with NordPass

    Now you can book trips, shop online, and log in to your social accounts without having to install the NordPass app. Let the standalone extension do the heavy lifting — manage your passwords, passkeys, payment card information, and personal information straight from the browser.

  • Seamless password access on any computer

    The standalone extension provides full access to your passwords, passkeys, credit cards, personal information, and secure notes on any offbeat desktop device, whether it’s your workstation or… Chromebooks (wink, wink, Chromebook users, we knew you would love it).

 

The new NordPass browser extension experience includes all the features that are available on the app. In other words, the standalone extension has it all, without needing to download or install the app on your desktop or laptop.

– Karolis Vanagas

Product owner at NordPass

However, it’s important to note that the NordPass desktop application is not going anywhere. The app remains a part of the NordPass product suite. Check FAQs here.

I already use NordPass, is there anything that I need to do?

So, you might be wondering if there’s anything you’ll need to do once the update rolls out.

Chrome, Edge, Brave, Opera

Well, if you already have NordPass installed on your device and use any of the Chromium-based browsers, simply kick back and relax — there’s nothing that you need to do. The new browser extension will be updated automatically upon its release — and you probably won’t notice a thing.

Support for Firefox and Safari browsers is coming in Q2 of this year!

New to NordPass?

You don’t need to be a rocket scientist to start using NordPass on a desktop device. Just add the standalone extension and you’re all set — no need to download or install the app!

Check out our detailed support guide for getting started with NordPass quickly and easily.

Once you have the new NordPass extension running on your Chrome-based browser, you can start using NordPass to its fullest extent.

If you have any further questions regarding the standalone NordPass extension or NordPass in general, do not hesitate to contact our wonderful support team at support@nordpass.com — they’re ready to take care of any issues you might have. Also, if you have any suggestions or feedback regarding the NordPass browser extension, drop us a message — we’re all ears, at all times.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

Understanding the Business Continuity Plan and Its Importance

These days, cybercrime is rampant. It’s no longer a matter of “if” you’re going to suffer an attack but “when” it will happen. All companies want to be ready for any crisis. And this is where a business continuity plan comes into play.

But what is a business continuity plan exactly? Why is it important? What should one include? Today, we’re exploring all these questions in-depth.

What is a business continuity plan?

A business continuity plan (BCP) is a document that sets guidelines for how an organization will continue its operations in the event of a disruption, whether it’s a fire, flood, other natural disaster or a cybersecurity incident. A BCP aims to help organizations resume operations without significant downtime.

Unfortunately, according to a 2020 Mercer survey, 51% of businesses across the globe don’t have a business continuity plan in place.

What’s the difference between business continuity and disaster recovery plans?

We often confuse the terms business continuity plan and disaster recovery plan. The two overlap and often work together, but the disaster recovery plan focuses on containing, examining, and restoring operations after a cyber incident. On the other hand, BCP is a broader concept that considers the whole organization. A business continuity plan helps organizations stay prepared for dealing with a potential crisis and usually encompasses a disaster recovery plan.

Importance of business continuity planning

The number of news headlines announcing data breaches has numbed us to the fact that cybercrime is very real and frequent and poses an existential risk to companies of all sizes and industries.

Consider that in 2021, approximately 37% of global organizations fell victim to a ransomware attack. Then consider that business interruption and restoration costs account for 50% of cyberattack-related losses. Finally, take into account that most cyberattacks are financially motivated and the global cost of cybercrime topped $6 trillion last year. The picture is quite clear — cybercrime is a lucrative venture for bad actors and potentially disastrous for those on the receiving end.

To thrive in these unpredictable times, organizations go beyond conventional security measures. Many companies develop a business continuity plan parallel to secure infrastructure and consider the plan a critical part of the security ecosystem. The Purpose of a business continuity plan is to significantly reduce the downtime in an emergency and, in turn, reduce the potential reputational damage and — of course — revenue losses.

Business continuity plan template

Password security for your business

Store, manage and share passwords.

Get NordPass Business

30-day money-back guarantee

Business Continuity Plan Example

[Company Name]

[Date]

I. Introduction

  • Purpose of the Plan

  • Scope of the Plan

  • Budget

  • Timeline

The initial stage of developing a business continuity plan starts with a statement of the plan’s purpose, which explains the main objective of the plan, such as ensuring the organization’s ability to continue its operations during and after a disruptive event.

The Scope of the Plan outlines the areas or functions that the plan will cover, including business processes, personnel, equipment, and technology.

The Budget specifies the estimated financial resources required to implement and maintain the BCP. It includes costs related to technology, personnel, equipment, training, and other necessary expenses.

The Timeline provides a detailed schedule for developing, implementing, testing, and updating the BCP.

II. Risk Assessment

  • Identification of Risks

  • Prioritization of Risks

  • Mitigation Strategies

The Risk Assessment section of a Business Continuity Plan (BCP) is an essential part of the plan that identifies potential risks that could disrupt an organization’s critical functions.

The Identification of Risks involves identifying potential threats to the organization, such cybersecurity breaches, supply chain disruptions, power outages, and other potential risks. This step is critical to understand the risks and their potential impact on the organization.

Once the risks have been identified, the Prioritization of Risks follows, which helps determine which risks require the most attention and resources.

The final step in the Risk Assessment section is developing Mitigation Strategies to minimize the impact of identified risks. Mitigation strategies may include preventative measures, such as system redundancies, data backups, cybersecurity measures, as well as response and recovery measures, such as emergency protocols and employee training.

III. Emergency Response

  • Emergency Response Team

  • Communication Plan

  • Emergency Procedures

This section of the plan focuses on immediate actions that should be taken to ensure the safety and well-being of employees and minimize the impact of the event on the organization’s operations.

The Emergency Response Team is responsible for managing the response to an emergency or disaster situation. This team should be composed of individuals who are trained in emergency response procedures and can act quickly and decisively during an emergency. The team should also include a designated leader who is responsible for coordinating the emergency response efforts.

The Communication Plan outlines how information will be disseminated during an emergency situation. It includes contact information for employees, stakeholders, and emergency response personnel, as well as protocols for communicating with these individuals.

The Emergency Procedures detail the steps that should be taken during an emergency or disaster situation. The emergency procedures should be developed based on the potential risks identified in the Risk Assessment section and should be tested regularly to ensure that they are effective.

IV. Business Impact Analysis

The Business Impact Analysis (BIA) section of a Business Continuity Plan (BCP) is a critical step in identifying the potential impact of a disruption to an organization’s critical operations.

The Business Impact Analysis is typically conducted by a team of individuals who understand the organization’s critical functions and can assess the potential impact of a disruption to those functions. The team may include representatives from various departments, including finance, operations, IT, and human resources.

V. Recovery and Restoration

  • Procedures for recovery and restoration of critical processes

  • Prioritization of recovery efforts

  • Establishment of recovery time objectives

The Recovery and Restoration section of a Business Continuity Plan (BCP) outlines the procedures for recovering and restoring critical processes and functions following a disruption.

The Procedures for recovery and restoration of critical processes describe the steps required to restore critical processes and functions following a disruption. This may include steps such as relocating to alternate facilities, restoring data and systems, and re-establishing key business relationships.

The Prioritization section of the plan identifies the order in which critical processes will be restored, based on their importance to the organization’s operations and overall mission.

Recovery time objectives (RTOs) define the maximum amount of time that critical processes and functions can be unavailable following a disruption. Establishing RTOs ensures that recovery efforts are focused on restoring critical functions within a specific timeframe.

VI. Plan Activation

  • Plan Activation Procedures

The Plan Activation section is critical in ensuring that an organization can quickly and effectively activate the plan and respond to a potential emergency.

The Plan Activation Procedures describe the steps required to activate the BCP in response to a disruption. The procedures should be clear and concise, with specific instructions for each step to ensure a prompt and effective response.

VII. Testing and Maintenance

  • Testing Procedures

  • Maintenance Procedures

  • Review and Update Procedures

This section of the plan is critical to ensure that an organization can effectively respond to disruptions and quickly resume its essential functions.

Testing procedures may include scenarios such as natural disasters, cyber-attacks, and other potential risks. The testing procedures should include clear objectives, testing scenarios, roles and responsibilities, and evaluation criteria to assess the effectiveness of the plan.

The Maintenance Procedures detail the steps necessary to keep the BCP up-to-date and relevant.

The Review and Update Procedures describe how the BCP will be reviewed and updated regularly to ensure its continued effectiveness. This may involve conducting a review of the plan on a regular basis or after significant changes to the organization’s operations or threats.

What should a business continuity plan checklist include?

Organizations looking to develop a BCP have more than a few things to think through and consider. Variables such as the size of the organization, its IT infrastructure, personnel, and resources all play a significant role in developing a continuity plan. Remember, each crisis is different, and each organization will have a view on handling it according to all the variables in play. However, all business continuity plans will include a few elements in one way or another.

  • Clearly defined areas of responsibility

    A BCP should define specific roles and responsibilities for cases of emergency. Detail who is responsible for what tasks and clarify what course of action a person in a specific position should take. Clearly defined roles and responsibilities in an emergency event allow you to act quickly and decisively and minimize potential damage.

  • Crisis communication plan

    In an emergency, communication is vital. It is the determining factor when it comes to crisis handling. For communication to be effective, it is critical to establish clear communication pipelines. Furthermore, it is crucial to understand that alternative communication channels should not be overlooked and outlined in a business continuity plan.

  • Recovery teams

    A recovery team is a collective of different professionals who ensure that business operations are restored as soon as possible after the organization confronts a crisis.

  • Alternative site of operations

    Today, when we think of an incident in a business environment, we usually think of something related to cybersecurity. However, as discussed earlier, a BCP covers many possible disasters. In a natural disaster, determine potential alternate sites where the company could continue to operate.

  • Backup power and data backups

    Whether a cyber event or a real-life physical event, ensuring that you have access to power is crucial if you wish to continue operations. In a BCP, you can often come across lists of alternative power sources such as generators, where such tools are located, and who should oversee them. The same applies to data. Regularly scheduled data backups can significantly reduce potential losses incurred by a crisis event.

  • Recovery guidelines

    If a crisis is significant, a comprehensive business continuity plan usually includes detailed guidelines on how the recovery process will be carried out.

Business continuity planning steps

Here are some general guidelines that an organization looking to develop a BCP should consider:

Analysis

A business continuity plan should include an in-depth analysis of everything that could negatively affect the overall organizational infrastructure and operations. Assessing different levels of risk should also be a part of the analysis phase.

Design and development

Once you have a clear overview of potential risks your company could face, start developing a plan. Create a draft and reassess it to see if it takes into account even the smallest of details.

Implementation

Implement BCP within the organization by providing training sessions for the staff to get familiar with the plan. Getting everyone on the same page regarding crisis management is critical.

Testing

Rigorously test the plan. Play out a variety of scenarios in training sessions to learn the overall effectiveness of the continuity plan. By doing so, everyone on the team will be closely familiar with the business continuity plan’s guidelines.

Maintenance and updating

Because the threat landscape constantly changes and evolves, you should regularly reassess your BCP and take steps to update it. By making your continuity plan in tune with the times, you will be able to stay a step ahead of a crisis.

Level up your company’s security with NordPass Business

A comprehensive business continuity plan is vital for the entire organization’s security posture. However, in a perfect world, you wouldn’t have to use it. This is where NordPass Business can help.

Remember, weak, reused, or compromised passwords are often cited as one of the top contributing factors in data breaches. It’s not surprising, considering that an average user has around 100 passwords. Password fatigue is real and significantly affects how people treat their credentials. NordPass Business counters these issues.

With NordPass Business, your team will have a single secure place to store all work-related passwords, credit cards, and other sensitive information. Accessing all the data stored in NordPass is quick and easy, which allows your employees not to be distracted by the task of finding the correct passwords for the correct account.

In cyber incidents, NordPass Business ensures that company credentials remain secure at all times. Everything stored in the NordPass vault is secured with advanced encryption algorithms, which would take hundreds of years to brute force.

If you are interested in learning more about NordPass Business and how it can fortify corporate security, do not hesitate to book a demo with our representative.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.