Give your online accounts a security checkup

Your email account often controls password resets for other services. Start there, then work through your most important accounts.

Use a unique sign-in for every account

Choose a strong, unique password for each service. A reputable password manager can help you create and store them. Where a service supports passkeys, review its setup and recovery instructions before switching.

Add a second layer

Enable multi-factor authentication where available. Follow the service’s official instructions, and store recovery codes in a safe place separate from the device used to sign in.

Review recovery and access

Confirm that your recovery email and phone number are current. Review signed-in devices and connected applications. Remove access you do not recognize through the service’s official security settings.

Plan for a lost device

Make sure you can recover access if your phone is lost. Do not sign out of your only working session until you have confirmed your recovery options. For a work account, coordinate changes with your administrator.