Account security reset
Whose accounts Date
1. Email first: it can reset everything else
- Change the email password to a long, unique one, ideally from a password manager.
- Turn on two-step verification with an authenticator app or security key.
- Check the recovery phone number and backup email. Remove anything you don’t recognize.
- Check forwarding rules and filters. Delete any you didn’t create.
- Sign out of other devices and sessions you don’t recognize.
2. Then every other account
| Account | New unique password | Two-step on | Recovery info checked | Unknown devices and apps removed |
|---|---|---|---|---|
| Apple or Google account | ||||
| School account | ||||
| Game accounts | ||||
| Social media | ||||
| Bank or payment apps | ||||
3. Money and friends
- Check saved cards, recent purchases, and app store charges.
- If money moved, call the bank or card company now.
- Tell friends not to trust recent odd messages or links from the account.
4. Keep it that way
- Save backup codes somewhere safe and offline.
- Turn on automatic updates for phones and computers.
- Report scams at ReportFraud.ftc.gov, and identity theft at IdentityTheft.gov.
Never share a login code, backup code, or password with anyone, even someone who says they work for the company.