5 jaankaariyaan jo kabhi plain text mein nahi bhejni chahiye

Hum har din saikadon messages bhejte hain. WhatsApp, email, Telegram, SMS — yeh itna automatic ho gaya hai ki hum security ke baare mein sochte hi nahi.

Lekin kuch jaankaari kabhi bhi plain text ke roop mein kisi bhi messaging app, email ya SMS ke zariye nahi bhejni chahiye. Ek laparwah message se aisi samsyaein ho sakti hain jinhe suljhane mein mahinon ya saalon lag sakte hain.

1. Password aur login jaankaari

"Password WhatsApp par bhej do" — shayad digital duniya ka sabse khatarnaak vaakya.

Verizon Data Breach Investigations Report 2024 ke anusaar, 81% hacking ghatnaon mein churaaye gaye ya kamzor credentials shamil the. Fir bhi, laakhon log har din messenger par password bhejte hain.

Yeh kyon ek ticking time bomb hai

• Chat history hamesha ke liye save hoti hai. Aap message delete kar bhi dein, woh recipient ke device par bana rehta hai.
• Search function turant dhundh leta hai. Device tak pahunch rakhne wala koi bhi "password" search karke sab kuch pa sakta hai.
• Screenshots par koi niyantran nahi. Send button dabate hi aap sara control kho dete hain.
• Ek chori hua phone = poora data leak. Us conversation mein share kiya gaya har password khatre mein aa jaata hai.

2023 mein, EA Games ka 780GB source code chori ho gaya jab hackers ne Slack channel mein share kiye gaye login credentials haasil kar liye. Ek "surakshit" corporate messenger kaafi surakshit nahi tha.

2. Credit card number aur vittiya jaankaari

"Bas is baar" card number bhej deta hoon — aur woh message hamesha ke liye chat history mein reh jaata hai.

Woh ek message ek permanent record ban jaata hai. Chat logs cloud mein backup hote hain, devices ke beech sync hote hain, aur account hack hone par sab kuch ek saath leak ho jaata hai.

Chaunkaane wale aankde

Reserve Bank of India ke anusaar, digital payment fraud ke cases mein lagaataar barhotari ho rahi hai. Card number ke 16 digit, CVV ke 3 digit aur expiry date — bas itna kaafi hai online shopping ke liye.

WhatsApp ya SMS par card details bhejne ka matlab hai ki aap yeh jaankaari recipient ke device, cloud backup aur servers par permanent roop se store kar rahe hain.

3. Aadhaar number aur pehchaan patr

Aadhaar number, passport number, driving license number — yeh numbers ek baar leak hone par badla nahi ja sakta.

National Crime Records Bureau ke anusaar, pehchaan ki chori (identity theft) sabse tezi se badhne wale aparaadhon mein se ek hai. Leak hua Aadhaar number bank account kholne, loan lene, SIM card nikaalane jaise kaamon mein istemaal ho sakta hai.

Samsya ki gambheerta

• Password badla ja sakta hai, lekin Aadhaar number poori zindagi ka hai.
• Identity theft se ubharne mein aam taur par kai mahine se kai saal lagte hain.
• Rent agreement ya insurance ke liye Aadhaar ki photo WhatsApp par bhejne ki aadat vishesh roop se khatarnaak hai.

4. Chikitsa aur swasthya jaankaari

Test results, prescriptions, insurance details, diagnosis — medical jaankaari sabse sensitive personal data mein se hai.

Kai deshon mein, medical jaankaari ko asurakhshit channels se share karna gairakaanooni hai. America mein HIPAA ke tahat har ullanghana par $1.5 million tak ka jurmana ho sakta hai. EU ka GDPR health data ko "vishesh shreni" maanta hai jismein mazboot suraksha zaroori hai. Bharat mein bhi Digital Personal Data Protection Act, 2023 personal health data ki suraksha ka praavdhaan karta hai.

Leak hone ke parinam

• Insurance se inkaar
• Naukri mein bhedbhaav
• Samajik kalankit aur sambandhon par asar
• Jaankaari apaltit nahi ho sakti — aap kisi ko aapka diagnosis "bhulaa" nahi sakte

5. Vyaaparik rahasya aur API keys

Source code, API keys, aantarik dastaavez, client data — kisi bhi vyaapar ki jaan yeh intellectual property hai.

GitGuardian ki 2024 ki report mein sirf public GitHub repositories mein 1.2 crore se zyaada leaked secrets mile. Messenger ke zariye share ki gayi keys to in aankadon mein shamil bhi nahi hain.

Ek leak ki keemat

• Ek leaked AWS API key se kuch hi ghanton mein $50,000 se adhik ka andhikarit kharcha ho sakta hai.
• Uber ko 2022 mein ek bada security breach hua jab credentials internal Slack messages se leak hue.
• Ek API key poore infrastructure, customer database aur financial systems tak pahunch de sakti hai.

Iske bajaay kya karein

Har prakar ki sensitive jaankaari ke liye ek surakshit vikalp hai:

Jaankaari ka prakar	Surakshit vikalp
Password	Password-protected links (LOCK.PUB memo feature)
Vittiya jaankaari	Encrypted channels ya vyaktigat roop se dein
Pehchaan number	Password-protected documents
Chikitsa jaankaari	Surakshit medical portals
API keys	Secret management tools (Vault, .env) + ek baar share karne ke liye protected links

LOCK.PUB ke saath, aap kisi bhi sensitive text ko ek password-protected memo link mein badal sakte hain jismein expiry time set kar sakte hain. Content sirf password se accessible hota hai aur expiry ke baad automatic delete ho jaata hai — chat history mein hamesha ke liye rehne se kahin zyaada surakshit.

Sone ka niyam: Agar hoarding par lagaane mein sharm aaye, to plain text mein mat bhejein

Ek simple test: Kya aap comfortable hongey agar yeh jaankaari Connaught Place ke ek bade hoarding par dikh jaaye?

Agar jawaab nahi hai, to plain text mein mat bhejein.

Suvidha aur suraksha ko dushman hona zaroori nahi hai. Ek protected link banaane mein 30 second lagte hain. Data breach se ubharne mein mahine — ya saal lag sakte hain.

Abhi se apni jaankaari ki raksha shuru karein

Agli baar jab aap sensitive jaankaari chat window mein paste karne waale hon, ek pal ke liye ruken.

LOCK.PUB par muft mein password-protected link banaayen. 30 second ki saavdhaani aapko saalon ki pareshaani se bachaa sakti hai.

Kuch jaankaariyaan itni keemti hain ki unhe plain text mein bhejne ka jokhim nahi uthaya ja sakta.