B1G2 Digital Standards Hub Employee Security Portal
0/4
B1G2 Technologies Standard

B1G2 Digital Standards Hub

Everything you need to set up your password vault, configure mobile sign-ins, and lock in seamless digital hygiene with zero friction.

1 One-Time Setup Checklist

Complete these steps once on your computer and phone.

Step 1 (~5 mins)
42
Desktop 42

MS Authenticator

One-tap sign-ins with Number Matching to eliminate fatigue and phishing risks.

View Walkthrough ↓
Step 2 (~10 mins)
••••••••
1-Click Autofill

Bitwarden Vault

Centralized password manager. Autofill credentials instantly via Ctrl+Shift+L.

View Walkthrough ↓
Step 3 (~2 mins)
+ L
5m Lock

Screen Timer

Set workstation to sleep & lock automatically after 5 minutes of inactivity as a safeguard.

View Walkthrough ↓
Step 4 (~3 mins)
G @b1g2.io
Official Work Identity

Office Account Policy

All business transactions and client drives must use official @b1g2.io accounts—never personal emails.

View Walkthrough ↓
Installation Guide 1

Microsoft Authenticator: Step-by-Step Installation

Complete this once using your smartphone and your computer screen side-by-side.

Microsoft Authenticator Mobile App Official, secure, and free on both mobile app platforms
1 Computer Displays Code
Sign in request
42
"Enter this number on your phone"

When logging into Outlook or Teams, a 2-digit number will pop up on your monitor.

2 Phone Prompts Input
Sign in prompt
42

Open the phone notification, type the number shown on your monitor, and tap Approve.

3 Instant Authentication
Access Approved Time: Under 3 seconds

Your computer logs in automatically. Your session is protected against credential theft.

Step A: Download the App & Grant Permissions

Install Microsoft Authenticator on your mobile phone. During first launch, allow permissions for notifications and camera access (camera is only needed once to scan the setup code).

Step B: Open Security Info on Your Computer

Open the official portal on your browser: https://mysignins.microsoft.com/security-info

Click + Add sign-in method → select Authenticator app → click Add. Click Next until a black-and-white QR code appears on your monitor.

Step C: Scan the QR Code with Your Phone

Open Authenticator on your phone → tap + (top-right) → select Work or school account → tap Scan a QR code. Point your phone camera at your monitor to pair instantly.

Step D: Confirm Number Matching Test

Click Next on your monitor. A 2-digit number will show. When your phone vibrates asking "Are you trying to sign in?", type the matching number and tap Approve. Click Done on your PC.

Legitimate Prompt: APPROVE You are actively sitting at your computer and just entered your password. Compare the numbers and tap Approve.
Unexpected Prompt: DENY IMMEDIATELY Your phone buzzes while you are not logging in. Tap "No, it's not me" and notify IT immediately.
Installation Guide 2

Bitwarden: Complete Browser Installation & Setup

Follow these steps to install the extension, pin it to your toolbar, and configure autofill.

1. Install the Official Browser Extension Select the browser you use for daily work:
2. Pin the Extension (Make It Always Visible)
https://portal.office.com
🧩

Click the puzzle icon (🧩) at the top right of your browser → locate Bitwarden → click the pushpin icon so the emerald shield stays permanently visible.

3. Create Your Personal Master Passphrase Recommended Suggestion

You may use any strong password you prefer. However, we suggest choosing 4 simple random words connected by hyphens or spaces—it makes your passphrase effortless for you to remember and type, while remaining virtually impossible for automated computers to crack:

Visual Example Only (Do Not Copy Word-for-Word): Create your own unique words
coffee - morning - blue - river
Make up your own phrase! The words above are purely an illustration. Pick 4 random words of your own choice that you can easily visualize (e.g., favorite foods, places, or everyday objects).
Autofill Shortcut Press on any login screen to instantly enter credentials
Ctrl + Shift + L
Installation Guide 3

How to Set an Automatic Screen Lock Timer

Configure your PC or Mac to automatically lock when unattended as a background safety net.

Windows 11 & 10 Setup

  1. Press Win + I to open Settings.
  2. Go to System → Power & battery (or Power & sleep on Windows 10).
  3. Click Screen and sleep to expand timeout settings.
  4. Under "When plugged in, turn off my screen after", select 5 minutes.
  5. Go to Accounts → Sign-in options → find "If you've been away, when should Windows require you to sign in again?" and select "When PC wakes up from sleep".
Shortcut Alternative: You can always lock manually anytime using Win + L.

macOS (MacBook & Mac) Setup

  1. Click the Apple menu () at the top left → select System Settings.
  2. Click Lock Screen in the left sidebar.
  3. Set "Turn display off on battery when inactive" and "Turn display off on power adapter when inactive" to 5 minutes.
  4. Set "Require password after display turns off or screen saver begins" to Immediately.
Shortcut Alternative: Instantly lock your Mac screen anytime by pressing Cmd + Ctrl + Q.
No Lost Work: The screen timer only turns off display output. It does not close open browser tabs, shut down running applications, or terminate background processes. Everything is ready when you sign back in.
Installation Guide 4

Office Accounts for Business Tasks: Setup & Policy

All company communication, client deliverables, file sharing, and external meetings must be conducted strictly through your authorized company account (@b1g2.io). Using personal Google or webmail accounts for business causes severe permission issues, loss of corporate records, and legal compliance risks.

Strict Policy: Zero Business Transactions on Personal Accounts When business tasks are done on personal accounts, client file permissions break when employees change devices, company audit trails are lost, and personal privacy is compromised during audits. Keep 100% of work inside your official @b1g2.io identity.
G
Link Your Company Email to Google Services Access client Google Drives & Meet without creating a personal @gmail.com
Open Google Sign-Up
Step 1: Open Google Sign-Up

Navigate to accounts.google.com/SignUp. Select For work or my business when asked how you want to use the account.

Step 2: Click "Use my current email address instead"

Do not create a new @gmail.com username. Click the option that says "Use your existing email" or "Use my current email address instead".

Enter your official business address: yourname@b1g2.io
Step 3: Verify the Code in Outlook

Google will send a 6-digit confirmation code to your official inbox. Open Microsoft Outlook, copy the verification code, and enter it to prove ownership of your business email.

Step 4: Save in Bitwarden & Use for All Client Drives

Set a strong master password for this Google profile and store it immediately in your Bitwarden Vault. Whenever a client asks for your email to share a Google Drive folder, Google Sheet, or Google Meet invite, provide your @b1g2.io address.

Why This Matters: Having a dedicated business account means client project assets remain safely stored within company-governed channels. If a project handover occurs, company access is seamless and your personal email address, photos, and files are never exposed to external clients or corporate audits.
Phase 2

Everyday Shift Habits

Simple routines to protect your workstation and projects.

The Step-Away Lock

Press Win + L (or Cmd + Ctrl + Q) whenever stepping away from your desk.

✓ Open Outlook emails, Teams chats, and active OneDrive files remain open and untouched.

MFA Verification Discipline

Only approve prompts when you actively typed your credentials on a workstation.

⚠ Never approve random notification pop-ups. It signals a compromised password.

Phase 3: Information Governance

Clean Communication Channels & Data Safety

Maintaining strict boundaries between company systems and personal messaging protects your personal privacy and keeps corporate assets compliant.

Guaranteed Work-Life Balance

When work stays in Teams and Outlook, you can mute notifications or shut down when your shift ends. Personal apps won't buzz with late-night work requests.

Personal Privacy Protection

Legal disputes or corporate compliance audits can legally request business communication logs. Keeping work off personal WhatsApp/SMS keeps your private life 100% private.

No Lost Project Context

Personal chats get buried, deleted, or lost when changing phones. Microsoft 365 keeps documents, version history, and decisions permanently searchable for your team.

The Data Sensitivity Hierarchy

Different types of information belong in different environments. Understand where sensitive data belongs.

Level 1 Public Information

Marketing collateral, public blog posts, job listings, public website links.

Platform: Any official company channel
Level 2 Internal Operations

Sprint updates, internal SOPs, project boards, general client communication.

Platform: Teams & Outlook Only
Level 3 Restricted Digital Secrets

Account passwords, shared vendor logins, API keys, database access tokens, and 2FA recovery backup codes.

Platform: Bitwarden Vault Only

Daily Operational Scenarios: How to Respond

Scenario A: A client messages your personal WhatsApp/Viber asking for a contract or invoice

The Risk: Personal apps lack corporate data loss protection, centralized discovery, and automated backups.

Recommended Response Script:
"Hi [Client Name]! To make sure our finance and ops team track this request properly, please send this over to my official email at maria.clara@b1g2.io. I'll get the document right over to you from our secure portal!"
Scenario B: Finishing work from home on a personal laptop

The Risk: Forwarding files to personal Gmail/Yahoo accounts creates unmanaged, unencrypted copies that violate client confidentiality.

The Safe Solution: Open your home browser, visit OneDrive (or sign in via your company Microsoft account), and edit files directly in web-based Word/Excel. Your changes stay automatically synced to the cloud, and no loose files remain on personal local disks.
Scenario C: A colleague asks for a tool login or temporary credential via Teams chat

The Risk: Plaintext credentials typed directly into Teams remain permanently stored in chat logs, search indices, and can be exposed during screen sharing.

The Safe Solution: Use Bitwarden Send (Free & Built-In)

  1. Open your Bitwarden extension and click the Send tab at the bottom.
  2. Click +, paste the credentials, and set "Maximum access count" to 1 (and expiration to 1 hour).
  3. Copy the generated secure link and paste only the link into your Teams chat.

The credential automatically self-destructs the moment your colleague views it!

Quick Everyday Reminders

Formal Business Microsoft 365 / Outlook

All client proposals, formal inquiries, invoices, vendor contracts, and official documentation.

✕ Never forward to personal webmail.
Internal Operations Microsoft Teams

Daily check-ins, sprint chats, internal queries, collaboration, and IT reach-out.

✕ Never paste unencrypted passwords.
Personal Life WhatsApp / SMS / Social

Personal errands, friends, family communication, and private conversations.

✕ Strictly zero work or client files.
Direct Human Support

Need Assistance? Contact Darwin

If you need any help with your Master Passphrase, pairing Microsoft Authenticator, or configuring your idle timer, don't hesitate to reach out!

Instant Chat Direct Message via Microsoft Teams (Darwin Dungo)