: This is the most effective way to stop someone from logging in, even if they have your password. Use an app like Google Authenticator rather than SMS. Use a Password Manager
within a folder on his server. He thought, "No one will ever find this obscure URL." index of password txt facebook login top