Microsoft Demands Authenticity for Access

Microsoft will retire SMS (text messages) next February as a means of authentication for access to its accounts. I can imagine someone standing up in a meeting and saying: “We’re doing this for your own good.” It’s time to cut the phishing line.

Text messages can work as an authentication method, but the concept has vulnerabilities. It’s based on the assumption that when you get a verification code to authenticate your access, you have your cell phone in your physical possession. That’s true virtually all of the time. However, text messages are subject to SIM swapping, a technique hackers use to temporarily take over your phone number, and they can do it long enough to intercept the text without you ever knowing about it until something goes wrong.

There are also some locations in various cellular networks that are vulnerable to breaches, and it’s possible that a hacker can get access to the cellular network right as the text message is being sent to you.

If a hacker can gain access to a user’s Microsoft account while they’re logging in, they can gain access to contact lists and use them to launch phishing campaigns by email and text.

Authenticator apps bypass the cellular network. They generate a code from your phone, making them impossible to intercept. Many authenticator apps include additional security measures such as passcodes, passwords, or biometric authentication (like fingerprints or facial recognition), making it more difficult for unauthorized users to access your accounts even if they have your password.

This does force an issue, especially for businesses or other organizations that require employees to use their personal cell phones for business. Some employees fear their employers will be able to access their personal phones. That does NOT happen with an authenticator app. Instead, it will provide stronger security for remote logins.

If an employee leaves an organization, the authenticator app for that phone can be blocked by the employer.

To comply, we highly recommend that users have a fairly recent smartphone. Older devices may have problems running the app or require a time-consuming process to get them set up or install a backup process.

We can help any user set up an authenticator app on their phone. In most cases, it’s just a matter of walking someone through the process. Once it’s installed, it can be used independently of the employer for access to any website that offers it as an option to SMS authentication.

Call us – 973-433-6676 – or email us if you have any questions or need help setting up the app.

No Folds Barred with New iPhone?

You don’t need to hold your breath, but Apple is making a big series of announcements at 1 p.m. ET tomorrow. One expected announcement is the new, foldable iPhone 18 Ultra. In our opinion, it’s not for everyone.

According to reports we’ve seen, it will have a book-like design, and it will measure around 5.5 inches when closed and 7.6 inches when open. It will be similar to using an iPad when unfolded. Because it’s expected to be so thin, there will be compromises. It will use Touch ID instead of Face ID, and it won’t have a telephoto camera.

So, if you are looking to combine an iPhone with greater photographic capabilities, you likely will want the Pro or the Max Pro model, neither of which is foldable. The Pro will feature the new A20 Pro chip, a smaller Dynamic Island, and a new dark cherry color option. The Pro Max adds a larger battery and a variable aperture camera.

The iPhone 18 is anticipated to bring significant upgrades in camera technology, particularly with its variable aperture and enhanced AI capabilities, which could lead to even better photography experiences compared to the iPhone 17. Both will have a 48 MP main lens and ultrawide camera, but the Pro Max will have a variable aperture on the main lens. That will give you more control over depth of field and light intake for better pictures. It will also have better AI-based processing. However, it will come at a cost of nearly $2,500.

The expected prices for the Pro and Pro Max are expected to be $1,099 and $1,299, respectively. Apple is expected to introduce a new iPhone 18 and iPhone SE in the spring. The base model for the iPhone 18 is expected to be $799.

The consensus we’ve seen is that it doesn’t make much sense to upgrade from the 17 to 18 unless you really want the better camera or if you want the folding capability and larger workspace of the 18 Ultra.

In addition to the phones, we can expect to hear about:

  • Apple Watch Series 12 and Ultra 4, both featuring a new chip and a number of fitness feature advances, especially for the Ultra 4
  • A smarter, better-connected Apple 4K TV
  • Second-generation HomePod with improved sound quality, device responsiveness and integration with other Apple products

As always, we’ll be available after announcements to answer your questions about the new products and offer selection advice based on your needs. Call us – 973-433-6676 – or email us to set up an appointment.

Avoid BitLocker Recovery Issues

Every business-grade Windows-based computer has a hidden 48-digit BitLocker recovery key. It’s a hidden, unique numerical password that automatically unlocks an encrypted drive when standard authentication methods fail, and it’s essential for regaining access to your data in situations such as hardware changes, forgotten passwords, or system updates. It typically restores access after BIOS updates, but sometimes it fails. Here’s how to avoid BitLocker problems.

First and most important, there is NO WAY to recover your 48-digit BitLocker recovery key. So, Step Number 1 is to write it on a piece of paper or copy it into a note on your smartphone or tablet. If you don’t have it when the “blue screen of death” appears, your data is dead.

The blue screen that appears when there is a failure does have a place for you to enter your 48-digit BitLocker recovery key. Just enter it accurately and you’re good to go. If you bought your business-grade computer from us, we have backed up your 48-digit key, and we can provide it for you.

Regardless, you should have your key readily available, and you can find it before anything happens. Go to account.microsoft.com on any device, sign in to your Microsoft account, click Devices, select your PC, and look for BitLocker data protection. Write down the code and store it safely in several places. This will work from any device that’s connected to the internet, and it’s one way to get your key when the blue screen is present.

While your computer is still functioning, you can go into your profile and click on the BitLocker key for your device. It is buried in your profile, but it can be found. We can walk you through the process or send you detailed instructions. We also keep records of the BitLocker key for each device, but sometimes names of people or devices don’t match our records.

BitLocker keys are good for security, but they are bad if you don’t remember your key or have access to it. There is an option to turn off the BitLocker system altogether, but we don’t recommend it. It’s like leaving a door open to all your data.

Call us – 973-433-6676 – or email us if you have any questions or need assistance in securing your BitLocker recovery key.