In my previous February Freebies posts, I gathered five free tools to help your nonprofit's program team alleviate common pain points, and six free graphic editing programs to help your marketing and communications staff create quick and professional designs.
To wrap up this series, I feel it's only fitting to share four tools that can help your nonprofit tech team identify threats, manage your nonprofit’s user accounts, remotely troubleshoot your computers and keep track of your IT inventory.
1. Have I Been Pwned? Domain Search, to identify compromised accounts
(Screenshot from HIBP creator, Troy Hunt)
Have I Been Pwned? (HIBP) is an online tool that aggregates breach data, and enables users to perform a quick search of their accounts to see if it’s been exposed. HIBP’s main tool is built for assessing one email address (or username) at a time, however HIBP’s Domain Search tool allows you to identify compromised accounts across an entire domain -- typically your nonprofit’s website (i.e., TechSoup Canada’s domain is “techsoupcanada.ca”) and receive future notifications for if and when a domain account is compromised. To use the Domain Search tool, you’ll need to verify that you are an authorized user for your domain (rightfully so!), which can be done by either responding to one of several predefined addresses for the domain, adding a TXT entry to your domain, adding a meta tag to the HTML at the root of the domain or uploading a .txt file to your website.
If you’re not the website administrator at your nonprofit, you can still use HIBP’s main tool to check if an account has been compromised in a data breach. If your account has indeed been compromised (as mine has in the above screenshot), HIBP details which security breach exposed your information, and the type of information that was leaked (e.g., username, password, geography, etc.). Then it’s up to you to take action! (i,e, update passwords and save them in a secure space).
[BONUS] Our technology donor partner, Bitdefender, makes several high quality free tools that can help identify threats to your network. Bitdefender’s Home Scanner is a great place to start: it scans your Wi-Fi network to look for weak passwords, vulnerable or poorly encrypted communications, and identifies and highlights network security flaws.
2. LastPass (online) or KeePass (offline), for managing your nonprofit’s user accounts
LastPass is an online password management software that also shines as an easy and secure way to manage your staff’s accounts. With LastPass, you can group and organize logins by category (i.e. departments, programs, etc.), and then grant or revoke permissions all in one place, making onboarding and offboarding procedures a breeze. LastPass also has free web extensions for all major browsers, so staff can sync their login information across multiple devices, and set LastPass to either autologin or autofill their passwords.
Not sure if an online password management software is right for you? No problem! KeePass is a great offline alternative. Just remember that KeePass stores and encrypts passwords locally, so if you plan on using it across multiple users and computers, you’ll still need a cloud service (such as Microsoft 365 for Nonprofits or G-Suite for Nonprofits) to keep it current for all staff.
3. Spiceworks Remote Support tool, for troubleshooting computers
Spicework’s remote access tool is extremely light-weight and easy to deploy (right in your browser!), making it perfect for quick troubleshooting sessions, or for supporting remote staff who may not be the most tech-savvy in your organization. It also has a neat feature that allows you to drag and drop files from one computer to another, making remote diagnosing even easier. To use Spicework’s remote access tool, simply click the “Start a remote session” button, and you’ll get a prompt to either email the end-user the link, or send them the link yourself. Once the user clicks the link, you’ll be able to view and control their desktop. It’s as simple as that!
4. Spiceworks, for easy IT inventory management
I know, I know, another tool from Spiceworks? What can I say, they make great free tools. Spicework’s Network Inventory tool is an extremely comprehensive IT management tool that scans your IP devices in minutes, collects detailed hardware and software information, performs risk analysis on your network and more. With Spiceworks, you can scan several subnets right from your desktop (or preferably, server), eliminating the need to visit each workstation at your nonprofit. You can identify security gaps, such as which workstation does not have an antivirus program installed, or which workstation is running low on storage capacity. Spiceworks is available for use online, or if you prefer to self-host it, you can download and install it on your own server.
And with that concludes my February Freebies series! I hope you’ve found my quick round-ups useful, or at the very least, inspires you to think about what tools can make your work life just a little bit easier :) Thanks for reading!