# General security considerations

**Casa's mission is to protect our members from any and all risk to their funds, starting with good security practices.**

The following security practices are recommend for any Casa member who is concerned about their security and privacy.

**Use a password manager**  
Casa recommends either 1Password or Bitwarden. Make sure you set it up on both mobile and desktop!

**Consider a VPN**  
We like Nord and Proton, but there are a number of good options available.

**Enable 2FA everywhere you can**  
We are big fans of YubiKeys, but Google Authenticator is a good option as well. Do NOT use your phone number, as this leaves you vulnerable to SIM-swap attacks.

**Prevent SIM-swap attacks**  
Contact your wireless carrier and ask them to secure your account against transfer with a separate PIN or passphrase.

**Keep your operating systems updated**  
All the major operating system developers dedicate tremendous resources to finding and fixing vulnerabilities. Make sure you update your Mac, Windows, Linux, iOS, and/or Android devices frequently.
