Use a different password for every account
A reused password can turn one data breach into several compromised accounts. Use a reputable password manager to create and store strong, unique passwords.
Turn on multifactor authentication
When available, use a passkey, security key or authenticator app. Keep backup recovery codes somewhere safe. Do not provide login codes to callers or anyone claiming to be support.
Review recovery and device settings
Check that your recovery email and phone number are current. Remove old or unknown sessions from account settings and review connected apps periodically.
If you think an account was compromised
Go directly to the official service, change your password, revoke unknown sessions and follow the service’s recovery process. If financial information is involved, contact your bank through its verified channel.