Protect Your Online Accounts and Digital Privacy
Quick summary: Passwords, two-step verification, recovery options and privacy checks for your accounts.
Your email account is the key to many others, because password resets go there. Protecting it well, and the accounts for banking, social media and shopping, prevents most account takeovers.
This guide covers habits that work for everyone. Menus differ between services, so we describe what to look for rather than exact screens.
Before you start
Set aside twenty minutes and start with your main email account, then your bank and your most-used social account.
1. Use a unique password for each account
Reusing passwords means one leak exposes many accounts. A password manager, including the one built into your phone or browser, creates and stores strong unique passwords so you only remember one.
2. Turn on two-step verification
Open the security settings of important accounts and switch on 2-Step Verification or two-factor authentication. An authenticator app or a security key is stronger than a text message. Save backup codes somewhere safe and offline.
3. Consider passkeys
Many services now support passkeys, which let you sign in with your fingerprint, face or screen lock instead of a password. They are harder to steal through fake websites. Use them where offered.
4. Keep recovery options current
Check that your recovery email and phone number are yours and up to date. Remove old numbers you no longer own. Without working recovery options, regaining access after a problem can be very hard.
5. Review sign-ins and connected apps
In your account's security page, look at devices signed in, recent activity and apps with access. Sign out of devices you do not recognise and remove old connected apps. Our guide Essential Smartphone Security Tips covers more phone-level protection.
6. Limit what you share
Check privacy settings on social media: who can see your posts, your phone number and your location. Share less personal detail publicly, since scammers use it to sound convincing.
Pro tip and important warning
Pro tip: If a message makes you feel urgent worry, stop. Open the official app or type the website address yourself instead of tapping the link. See How to Identify Suspicious Apps and Links.
Important: Never share one-time codes, backup codes or passwords with anyone, even someone who says they are from the service. Real support teams do not ask for them.
Conclusion
Strong unique passwords, two-step verification and up-to-date recovery options protect most people from most attacks. Do the email account first and then work through the rest. For chat apps read WhatsApp Privacy Settings.
