In this issue:

• Apple vs Google: Which build-in password manager is best?

• Stay safe on Android with Google Play Protect

• New section: Data breaches

• Update on BADBOX 2.0 malware

Apple vs Google: Which build-in password manager is best?

I've talked about having strong passwords in previous articles (passwords discussed here and passkeys discussed here), but remembering them all can be a challenge. That’s where password managers come in. If you’re already using Apple or Google services, you may not need a third-party app. Each company offers a built-in password manager solution, and here’s how Apple iCloud Keychain and Google Password Manager compare.

1. Availability

• Apple iCloud Keychain: Works natively across iPhone, iPad, and Mac. There’s limited support for Windows, but no Android app. Best suited for those fully embedded in the Apple ecosystem.

• Google Password Manager: Available across Android, Chrome, and any platform with a Chrome browser—including macOS, Windows, and Linux. Strong cross-platform support makes it ideal for mixed-device users.

2. Ease of Use

• Apple: Seamless and intuitive for Apple users. Automatically fills passwords in Safari and apps, syncs with iCloud, and uses Face ID or Touch ID for authentication.

• Google: Simple and tightly integrated with Chrome and Android. Automatically saves and fills in passwords on websites and apps, with a clean interface for managing credentials.

3. Advanced Features

• Apple: Shared password groups, autofill of multi-factor authentication codes, and syncing across all Apple devices.

• Google: Works with passkeys, imports/export options, password strength alerts, and account security insights.

Final Verdict

• Choose Apple iCloud Keychain if you’re an Apple-only user and want convenience, autofill, and tight integration.

• Choose Google Password Manager if you use Chrome and Android or want a cross-platform solution with autofill and breach detection.

• Choose a third-party commercial solution for better sharing of passwords with trusted family or friends.

I'll cover third-party commercial solutions in a future article, but the one we've been using for many years is Keeper Security.

Stay safe on Android with Google Play Protect

If you use an Android phone, keeping your applications and data safe is important — and luckily, the built-in Google Play Protect helps do just that.

Every time you download an app from the Google Play Store (which is the only safe way to download Android apps), Play Protect works in the background just like anti-virus software to check for anything suspicious. It’s like having someone inspect an Amazon box before you open it, just to make sure there’s nothing harmful inside. Even after you’ve installed the app, Play Protect keeps scanning your phone daily to make sure everything is running safely.

You don’t have to install anything extra — Play Protect is built right into your Android device. To check if it’s working, go to the Google Play Store app, tap your profile picture in the top-right, then tap Play Protect. You’ll see when your phone was last scanned and whether everything looks good.

If Play Protect ever finds an app that’s acting strangely or trying to harm your phone, it can warn you or even remove the app automatically. In short, Google Play Protect is a simple but powerful way to help keep your phone safe — no complicated steps required.

Data breaches - New section!

There were so many reports on data breaches this week, I decided it would be easier to include this section whenever a new data breach is in the news. Most of the time these will be companies that you don’t have any personal data with, but scan the names to make sure you aren’t affected.

Anne Arundel Dermatology: 1.9M individuals: Anne Arundel Dermatology Data Breach Impacts 1.9 Million People - SecurityWeek

Radiology Associates of Richmond: 1.4M individuals: 1.4 Million Affected by Data Breach at Virginia Radiology Practice - SecurityWeek

Cierant Corporation: 232k records: PRIVACY ALERT: Cierant Corporation Under Investigation for Data Breach of Over 232,000 Records

Zumpano Patricios: 250k patient records: PRIVACY ALERT: Zumpano Patricios, P.A. Under Investigation for Data Breach of Over 250,000 Patient Records

Texas Alcohol & Drug Testing Service (TADTS): 750,000 people: Notice of Data Incident - TADTS | The Alcohol & Drug Testing % %

Updates to previous articles

Remember when I warned you that your smart TV and IoT devices could be taken over by criminals using a computer program called BADBOX 2.0? (Article here.) Google is now suing the criminals behind the BADBOX 2.0 botnet (think of a botnet as connected computer programs). The botnet is used mainly for fraud and has “harmed millions of victims in the United States and around the world and threatens many more,” says Google. An injunction will allow Google to disrupt the botnet infrastructure and stop its spread to other devices. (Google Sues Operators of 10-Million-Device Badbox 2.0 Botnet - SecurityWeek)

Do you have an idea for a future newsletter? Please reply to this email and let me know.

Thank you so much!

Sincerely,
Cassie Crossley
Founder, Cyber Safe Center
https://www.cybersafecenter.com