• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

Minafi

Financial Independence Through Investing, Minimalism & Mindfulness

  • Minafi
  • Start Investing
    • Article Series
  • Learn
    • Start Here
  • Calculators
    • ESPP Calculator
    • Bonus Tax Calculator
    • Rule of 72 Calculator
    • FI with Options Calculator
  • FIRE Guide
    • FIRE Guide
    • FIRE in the News
  • About
    • About Adam & Minafi
    • Vision & Mission
    • Income & Expenses
    • Recommendations: Tools I Use
    • My Net Worth Reports
    • Contact Me
  • Blog
    • Investing
    • Financial Independence
    • Mindfulness
    • Minimalism
    • Personal
    • Goals
  • Search

Blog

My Four Phases of Financial Independence

Written by Adam on June 24, 2019. Updated January 8, 2023.
11 min read. Personal, Investing, Blog, Minafi, Canonical. 5 Comments

Inspired by Gwen from Fiery Millennials and Stop Ironing Shirts, I thought I’d share my route to financial independence – split up by the four phases that got me here.

As a primer on this – I retired at age 36, just 6 months ago. I was extremely fortunate to have a life that enabled that kind of lifestyle transition at such an early age. This post details how it was possible.

[Read more…] about My Four Phases of Financial Independence

6 Thoughts After 6 Months of Early Retirement

Written by Adam on June 17, 2019. Updated January 8, 2023.
8 min read. Personal, Financial Independence, Blog, Minafi, Canonical. 8 Comments

As I’m getting used to post-work life I’ve been trying to keep track of what’s surprised me or been unexpected about the transition. These have all been good problems – how to eke out more happiness, productivity, mental or physical health from the same days.

I shared some of these after one month, then again after 3 months into my post-work life. Today I’m digging into 6 whole months off (I can’t believe it’s been that long already).

At the top of Mount Olympus in Salt Lake City at 9,000 ft up.
Me at the top of Mount Olympus signing the guest book (stored in a mailbox).
[Read more…] about 6 Thoughts After 6 Months of Early Retirement

Where Are You on the FIRE Spectrum?

Written by Adam on June 10, 2019. Updated January 8, 2023.
6 min read. Financial Independence, Blog, Minafi, Canonical. 7 Comments

Everyone has a unique relationship with money and a distinct path to retirement. These range from people who never work a day in their lives to those who never retire. There are always going to be people who build wealth faster than you and others that are on a slower path.

In other words, there’s a spectrum of people who pursue FIRE.

[Read more…] about Where Are You on the FIRE Spectrum?

May Goals, Investments and Spending – Running, Hiking and Enjoying Time Outside

Written by Adam on June 3, 2019. Updated January 8, 2023.
18 min read. Canonical, Personal, Blog, Minafi. 2 Comments

Every month I share a quick recap of what happened over the last 31 days. In these posts, I share a bunch of details – what’s going on in my life, progress towards goals I’m working on, a breakdown of our spending over the last month and a look at our investments.

I absolutely love reading this kind of insight for others. It was one of the things that started to make it clear how people go about retiring early, what they focus their time on and how investing changing over time. My hope is that others will get equal value from my takeaways.

[Read more…] about May Goals, Investments and Spending – Running, Hiking and Enjoying Time Outside

Exponential Growth Calculator [solve for any variable]

Written by Adam on May 27, 2019. Updated January 8, 2023.
4 min read. Calculators, Investing, Interactive, Blog, Minafi, Canonical. Leave a Comment

The exponential growth formula is used to calculate the future value [P(t)] of an amount given initial value [P0] given some rate of growth [r] over some period of time [t].

P\lparen t \rparen =P_0\space\times\space\lparen 1 + r \rparen ^t

This formula is absolutely core to understanding compound interest. It can be used for anything that is growing exponentially! Try entering any numbers in to see their value:

You can change which variable you solve for any time and the solved for variable will update as you make changes.

So what do these variable means?

  • P(t) = the value at some future time, t
  • P0 = initial amount at time t = 0 
  • r = the growth rate as a percentage (1% = 0.01)
  • t = time – the number of periods (intervals). This could be months or years – just depends on when the rate compounds.

This form is solving for P(t), or the future value. You can also shift this formula around and solve for any other variable! If you have any 3 values, you can solve for the remaining one.

The hard part (for me at least) was solving the equation for each variable. What if you know the current value, future value, and rate, but you want to solve for time? Or what if you want to solve for rate?

Let’s check out how to use this same formula solved for each variable!

Solving for Future Value – P(t)

So, let’s look at an example. Assume you have $1,000 [P0] and want to know what the value of that money will be in 10 years [t], assuming a 7% growth rate [r].

This works great for our initial formula! We’re already solving for future value [P(t)], so we can use this one:

P\lparen t \rparen =P_0\space\times\space\lparen 1 + r \rparen ^t

You can substitute in the values from the above paragraph and see the result:

\$1,000\space\times\space\lparen 1 + 0.07 \rparen ^(10) = \$1,967.15

So after 10 years of 7% a year growth, the initial $1,000 would almost double to $1,967.15. In other words, the doubling time is just about a decade.

This falls in line with the Rule of 72, which states if you divide 72 by the rate, it’ll take that many years to double your money. 72/7 = 10.28 years. If you’re looking to make quick double calculations, the Rule of 72 is an easier way than the exponential growth formula.

Solving For Current Value – P0

If you know what the future value is, but want to solve for the current value, you can rebalance this equation to solve for P0, current value:

P_0 = {P\lparen t \rparen\over{\lparen 1 + r \rparen ^t}}

Where P0 is the current value, P(t) is the future value, r is the rate, and t is time. This is useful if you want to see what initial investment is needed today to reach a future state with a known time and growth rate.

Solving For Rate – r

When I make predictions I tend to be somewhat pessimistic – or more likely realistic. When calculating out the growth of my portfolio, I use a rate of 7%, which isn’t too far from what others have calculated the real rate of return on the stock market to be.

r = {\lparen{{P\lparen t \rparen}\over P_0}\rparen^{1\over t}} - 1

The formula looks kind of crazy, but it’s the same one as above just reformatted to solve for r. You can solve for r using this calculator:

Curious about how to earn 7% a year in the stock market? I have a free course that shows exactly how to get started doing it using safe, diversified index funds that track the larger market. This strategy is the same one Warren Buffet and John Bogle (creator of Vanguard and the Index fund) recommend.

Solving For Time – t

One thing I used a lot when going down my path to financial independence was solving for time. For instance, if I know the current value, how much I need to save, and can assume a 7% rate of return, how much time will it take to get there?

I built a much more elaborate visualization of this in The Interactive Guide to Early Retirement and Financial Independence which leans heavily on this formula. The formula for calculating t gets tricky, so hold on.

t = {\log{\lparen{{P\lparen t \rparen}\over P_0}\rparen}\over\log({1+r})}

This one looks a bit crazy. It’s because in order to move that exponent down to where we can work with it, we need to log both sides of the equation. The result comes out looking like this. Time is also called duration, interval or period – it’s the total number of time intervals it takes.

If you’re curious to learn more about how the work goes to solve for this, I’d recommend reading this paper on compound interest that has a few more examples on how to use formula.

Exponential Growth vs Compound Interest

These two terms are the same, but their definitions are different. Both involve non-linear growth that’s greater than constant growth. The growth curves look the same – up and to the right with a growing rate of change.

Exponential growth implies any type of growth where the calculation of the “next step” in growth is based on the current value. This can apply to money, logarithmic functions, algebra, calculus, acceleration number of bacteria in a sample, how fast a virus could spread, human population growth, Moores’s law for growth in transistors on a computer – you get the idea.

It’s a formula for seeing the growth over time.

Compound interest, on the other hand, is a specific application of the exponential growth formula to calculate future value. In the above calculators I’ve added dollar signs, percent signs and “years” to the fields to make them more easily understandable – but that does make all of these calculators compound interest calculators. You can use them for any of the above exponential growth calculations if you just ignore the units.

Have you ever needed to use the exponential growth formula manually to calculate out something? What did you use it for? Let me know!

Prevent Your Investments from Theft! Secure Your Vanguard Account with Yubikeys and Google Voice

Written by Adam on May 23, 2019. Updated January 8, 2023.
11 min read. Financial Independence, Investing, Blog, Minafi, Canonical. 4 Comments

A few weeks ago, someone shared a story about a man who lost his entire life savings – over $1 million – because his accounts were hacked.

In California, a student used a similar trick to steal $7.5 million in Bitcoins from an unsuspecting victim. This criminal was brought to justice and is serving time, but the method he exploited is still around – and growing in popularity.

Even though these crimes carry up to a 20-year jail sentence, the opportunity to steal millions of dollars from behind a computer will no-doubt spark more criminals to try.

Person opening wallet in front of computer

The method I’m referring to is called a “SIM-Swap”. This works by having someone effectively steal your phone number long enough to bypass your security methods and get access to your most secure accounts.

A SIM-Swap works like this:

1. Identification: Someone identifies you as a target of something the thief wants. Maybe you have a great handle on a social media site, you’ve mentioned somewhere that you have a bunch of money or you’ve decided to share your entire net worth on your blog.

2. Research: The thief does their homework on you, learning as much as they can. SSN, mothers maiden name – anything they can dig up on the dark web through various data breaches. The important things are your primary email address, your phone number, and wherever they want to steal is located. They might even stalk you on social media and find a time to continue on to step 3 while you’re on vacation.

3. SIM-Swap: The thief calls up your cell phone carrier provider pretending to be you. They give a sob story about how you lost your phone and need the number ported over to a new phone. At this moment your phone with the original number will begin to show “no service”. This is a tip that your phone has been SIM-swapped. If the thief chose a time you were traveling then you might not immediately realize what’s happening.

4. Getting Access: Now that the thief has your phone number and some data about you, things get easier (for them that is. Things get harder for you). The first great target is your email, which often allows for resetting a password using your phone number. With your email, they can find where your money is stored – Vanguard, Fidelity, Coinbase – wherever. They issue a password reset on these services – and since they have your email address and your phone number for 2-factor authorization, they are immediately granted access.

5. Take Over: With unlimited access, they can now start doing damage. They can log you out of all devices, change settings and passwords, change security questions and addresses. This makes it that much harder for you to prove ownership and retake the account – buying the thief time.

6. Transfer: If this is a financial account, the goal will be a heist – stealing your money. They liquidate what they can and transfer out the funds ASAP. If this is a social media account they want the handle of, they change the password and resell it to someone else.

If this sounds scary it’s because it is! It also happens all the time.

One of the best reports on this happening that I’ve heard about recently was an episode of the Reply All podcast called The Snapchat Thief. In this episode, the hosts of Reply All go on a journey into a den of thieves (which turn out to be all guys in their late teens or early 20s) who steal social media handles and resell them. It’s a really good episode if you’re curious to learn more.

The Cyber Podcast by Vice via Motherboard is another amazing one tackling this issue:

One minute, you’re using your phone as normal. The next minute, you lose cell service. “No SIM,” a message in the top left corner reads. You’re confused. You grab your computer, and try to login to your email. The password has been changed. Same with your Facebook. Your phone rings, apparently switched back on. On the other side is a hacker, who tells you that he’s stolen your phone number and your accounts, and that he’ll give them back if you send him Bitcoin.

Cyber Podcast episode “SIM Hijacking and the Phone Ransom”

Whether someone is stealing from your investments, your social media handle, or blackmailing you with photos you’ve saved to Snapchat, the attack vectors are often the same – and this means you can protect yourself if you know how.

How to Protect Yourself from the Dreaded SIM-Swap

We have tons of accounts and each one has a plethora of settings. Securing yourself requires taking a few steps. The more steps you take the better. At a high level, here’s what I’d recommend you do:

  1. Use different, long passwords for every service.
  2. Don’t use your phone number for anything you don’t want to lose.
  3. Switch to alternative 2-factor authentication methods.
  4. Turn security settings up to 11 on all important accounts.

Let’s go over these one by one.

1. Use different, long passwords for every service

This one shouldn’t need explaining. If you use the same password everywhere then you should make it a priority to change any accounts you wouldn’t want to lose tomorrow.

You don’t need to remember every single unique password either. You can use a service like LastPass or 1Password to store every one of your passwords for you and even generate new ones. These services will even alert you if an account is potentially compromised.

For example, 1Password keeps track of public data breeches and will let me know if a site has been compromised.

starwood security error
Starwood was the victim of a data breach.

I might not jump to change my Starwood password, but if I saw my bank account here I’d change that in an instant!

At the end of this phase you should have strong, unique passwords for your most important websites.

2. Don’t use your phone number for anything you don’t want to lose

There is one key way to protect yourself from SIM-swapping: don’t use your actual phone number!

This may seem a little simple, but it’s an important step. Your phone number is easily findable. If you’ve ever been the victim of a data breach (chances are you have, but you can check on Have I Been Pwned), then your phone number is one of the easiest fields to get access to.

The trick to good security is to use a completely new number that you never share with anyone. You don’t need to buy a burner phone for this. Instead, you can get a free phone number through Google Voice or Skype. You’ll want to make sure that this phone number doesn’t forward calls or text to your primary number. That would defeat the purpose.

Keep this number secret and keep is safe. Only use it on your most important accounts. I think it’s a good idea to use this number for anything where you have money or the ability to make money from. If someone is going to SIM-Swap you, then they likely won’t bother with stealing your credit card info.

The one place that is tricky is your Google Account, which has a phone number in case of reset. If you’re locked out of your account, you should assume you’re locked out of your Google Voice account so you wouldn’t want to use that number here. Luckily you can remove this phone number and use an email address instead. I’d recommend setting up another (also secure) email address that you can access in case of an emergency.

At the end of this phase, you should have your Vanguard account, Fidelity, and wherever you have money using a new phone number that no one else knows about. Never share it with others or add it to your address book. If you’re using LastPass or 1Password, you could add it in there for safe storage and reference.

3. Switch to alternative 2-factor authentication methods

While you could rely on your new phone number for authorization, there are better options out there! Not every site supports them, but many do. For those that don’t, just use your new secret phone number. There are a few standards out there for 2fa that have become very popular and add another level of defense.

OTP (One time password) Auth – App Driven Passwords

This is one of the most common options out there. After you log in with your username and password, you open up some other app that generates a one-time use password (usually 6 numbers long) that you use to log in. Since this number changes every 30 seconds, even if someone had stolen your password, or had a keylogger on your computer, they wouldn’t be able to access your account. Google Authenticator and Authy are two popular OTP apps, but I prefer to use 1Password. LastPass also supports one time passwords.

Supported by: Google, Facebook, Twitter, Betterment
Not Supported by: An embarrassingly high number of financial investing companies.

WebAuthn, FIDO2, U2F – Hardware Driven Auth

Using OTPs, you’re required to have access to your username, password, and a one time password. With hardware driven auth you need to have access to your username, password, and an authorization device – usually plugged into your USB port.

Yubikey and a computer
Yubikeys are small enough to keep plugged in

I only recently learned about hardware auth options. They are incredibly easy to use – really! They work like this:

  • You buy a hardware device. I’d recommend a YubiKey 5 Nano if you have old style USB ports, or a YubiKey 5C Nano if you have the newer USB-C ports.
  • Plug it into your USB port on your laptop.
  • Login to a site that supports it and go to “Add a key”.
  • At some point, the webpage will ask you to “tap” your key. This will bring up a browser dialog asking if you want to allow Vanguard (or whatever the site you’re on) to use your key.
  • Magic happens!
  • The site has now connected your physical key to its website.

It’s really that easy. Take a look at this complicated graphic on Vanguards website explaining it:

Using a security key with Vanguard.

When I tap the key, it takes about a second or two, then the Vanguard screen advances to my dashboard. That’s it. It’s even easier than entering a one time password.

Reading more about YubiKeys online, one recommendation is to have 2-copies of your key (buy 2 hardware devices). That allows you a backup in case the first is lost. My key lives in my laptops USB port and goes wherever it goes. The only way I’d lose it is if I lost my entire laptop.

Another option if you’re in a relationship would be to have 2 keys – one for you and one for your partner. Most services allow you to register multiple devices – giving you a backup in case your primary ket is lost. The key alone doesn’t grant access to your account, but if you should lose your key, you’d still be able to get into your accounts with your password and their key (this is the route Mrs. Minafi and I are going).

Supported by: Google, Facebook, Vanguard, GitHub, 1Password, Dropbox, LastPass and a bunch more.
Not Supported by: Pretty much everyone else.

Custom 2-factor Authorization

A few sites offer a completely custom option for 2fa. You may have experienced these before. If you log into Facebook on your computer, it may ask you to open up your phone and verify it’s you. Google has an option to do the same – requiring you to open up the Gmail app and confirm a login from another device.

These options both do the job. If they know you’re you on your phone and you grant access to your computer, that’s a trusted recommendation. There is a potential problem with these where if someone is trying to hack you and receive a prompt, only to click “accept” when you should have clicked “reject”.

When in doubt I choose one of the other options over custom 2-fa, but if that’s the only option it’s better than nothing.

4. Turn security settings up to 11 on all important accounts.

Wow, you must really want to secure your stuff! Assuming you’ve created good, unique passwords, removed your phone number from everything you can think of, turned on 2-factor authorization you might be thinking – what else is there?

What’s left will be different for each site. I’ve been going through this process myself and have found some settings to be extra helpful:

Vanguard Security Settings

Sadly, even with 2-fa enabled, Vanguard will allow you to login on a mobile device with username and password. In order to disable this, you’ll want to login to Vanguard and go to “My Account” > “Account Maintenance” > “Computer access restrictions” and turn on “Restrict unrecognized computers, browsers, or mobile devices from accessing my accounts.“

What that’ll do is prevent anyone from accessing your account on an unrecognized computer or device. If you do get a new computer, you’ll want to disable this, login, then re-enable it. If you completely lose your computer you’ll need to call Vanguard and figure things out with them.

The downside is that this will completely prevent you from being able to use something like Personal Capital or Mint to track your investments since they’ll lose access. I prefer to sleep well knowing that my accounts are secure, and have since switched to manually tracking investments on these services.

Google Security Settings

Google’s security page has a TON of options. It took me a good hour to go through everything in there. There aren’t too many caveats, other than to make sure you public phone number isn’t on there as a recovery method or for 2-factor auth.

Google also asks you to setup a recovery email address – one that you can use if you lose your password on the Google Account. You’ll want to make sure you’re taking the same steps with that email account as you are with your primary account.

The last, and possibly most important thing to do is to generate backup codes for your main email address. With these are backup codes you can access your account using only email, password and the code – bypassing your YubiKey, or other 2-FA method.

Googles 2-fa alternatives
Google has a bunch of 2fa options

Print out these codes and store them in a safe place. I keep a copy with my last will and birth certificate as a “just in case”. Hopefully I’ll never need to use them, but they’re good to have. If you do need to, you can sign in and use one of your 8-digit backup codes here.

Get Chatty

Another setting to enable for any services you think are important is for them to alert you whenever anything happens. Someones trying to log in? Email you. Someone just changed a setting? Email you. Someone changed your phone number? Email you.

When you’re first setting up your line of defense you’ll get a ton of emails, but after that, they’ll quiet down. The concern would be that you become accustomed to these emails and ignore an important one. If you receive an email at a time when you’re not expecting it you may be able to find a security breach far before the damage is done.

Get Your Spouse on Board

If you have accounts with multiple people on them, that’s multiple ways someone could use to get in. If you and your partner both have access to your Vanguard account or your bank account, it’s important to go through this security audit for both of you. A thief only needs one unlocked door.

Set a PIN with your Cell Phone Carrier

This is one of the most simple things you can do, but it can thwart a thief in their tracks. Call your cell phone carrier and ask them to add a PIN number to your account to be used in the event of a number transfer. If a thief (or future you) calls to port your number to a new phone your carrier will ask for that PIN number before completing the transfer.

My carrier (Mint Mobile) uses PIN numbers but sadly gives them out to anyone who can answer a few questions about me. That’s the same for most carriers. The biggest vector for an attack is social engineering the gatekeeper at your phone company. Don’t rely on them to be watch guards for your most valuable accounts.

Protect Yourself – It’s Worth the Time!

It was only a week ago I made all of these changes, but since then I feel much more secure about my financials and accounts. Setting up a YubiKey 5 (the current model) was easy enough, as was moving to a Google Voice number.

I think this is extremely important to do, especially if you’re in the public eye in any way (a blogger, interact with the community, share anything on Twitter).

The idea of becoming a target of SIM-Swap may sound far fetched. I hope it never happens to me or to you. The important thing to do is take steps now so that if it does happen you’re not going to lose years (or decades) of work overnight.

  • « Go to Previous Page
  • Go to page 1
  • Interim pages omitted …
  • Go to page 10
  • Go to page 11
  • Go to page 12
  • Go to page 13
  • Go to page 14
  • Interim pages omitted …
  • Go to page 43
  • Go to Next Page »

Primary Sidebar

Hi, I’m Adam!

Adam at Megacon

Hey, and Welcome! I’m Adam and I help millennials invest to reach financial independence sooner than they ever thought possible. Want to see what you could do to reach FI sooner? You’re in the right place!

Adam at Megacon

Hey, and Welcome! I’m Adam and I help millennials invest to reach financial independence sooner than they ever thought possible. Want to see what you could do to reach FI sooner? You’re in the right place!

Hi, I’m Adam!

Adam at Megacon

Hey, and Welcome! I’m Adam and I help millennials invest to reach financial independence sooner than they ever thought possible. Want to see what you could do to reach FI sooner? You’re in the right place!

Financial independence through investing, minimalism & mindfulness.

Slow down. Breathe. Relax. Invest. Get a good nights sleep.

Investment Series & Guides

  • The Minimal Investor
  • FIRE Guide
  • The Focused Investor

Categories

  • Investing
  • Financial Independence
  • Minimalism
  • Mindfulness
  • All

Minafi

  • About
  • Contact Me
  • Privacy Policy
  • Brand Assets
  • Advertiser Disclosure
  • How is this site built?