Protect your most important accounts
Secure your email, bank accounts, and recovery methods. Know what to do if someone takes over an account.
You will learnPrioritize account security steps and use official recovery channels after a compromise.
Quick scenario
Choose an answer to see the explanation.Which account often controls password recovery for several other accounts?
Worked example
A reused password is exposed
Avery learns that a password reused on email and a shopping account was exposed. Avery changes the email password first, signs out other sessions, turns on multi-factor authentication, checks recovery information, and then secures the other accounts.
- 01Unique password or passkey
- 02Multi-factor authentication
- 03Recovery methods reviewed
Key ideas
Three things to know
Protect the reset keys
Email and phone service can be used to reset banking, school, and social accounts. Give them unique passwords or passkeys, strong recovery settings, and multi-factor authentication that you understand how to recover.
Alerts shorten the response time
Enable sign-in, password-change, and transaction alerts. Review them through the real app or website rather than an alert link. Do not approve a login or share a code you did not request.
Read more
- Unique password or passkey
- Multi-factor authentication
- Current recovery information
- Sign-in and transaction alerts
Respond through official channels
If money moved without permission, contact the bank or payment company immediately using its official app, website, or the number on the card. If personal information was misused, IdentityTheft.gov can create a recovery plan. Save relevant notices and records.
Practice
Secure the highest-impact account
Use information you can confirm as you work through the checklist.
Interactive checklist
Secure one high-impact account
Start with email or another account that can reset your other logins.
Knowledge check
Check your understanding
Question 1 of 2