The 21st Century Bank Robbery: how to keep your Bitcoin stash from being part of it

Some friends and family have been accumulating various amounts of Bitcoin recently:

I just read a disturbing article on how easy it is to drain a bitcoin account that's set up with 2-factor authentication via text message.

One part of the solution: use other 2-factor authentication ... for example, Google Authenticator, which I already had set up on my phone for another site and which I easily added (just by scanning a barcode) to Gmail. I then removed the text-message authentication step.

Now all I need is a bunch of bitcoin! :-)

If you are keeping bitcoins, best not to let Coinbase or another exchange keep the keys for you. Keep the keys yourself ... I know this is all confusing, but a good book on the details is: