Passwords and accounts: where to start organizing your security

Prioritize accounts that recover other accounts

Your main email deserves attention because it often receives account recovery messages. Also list work services and other important accounts. Do not change everything at once: choose one account, confirm you can sign in and review recovery methods before continuing. Use only the services' official pages.

Different passwords reduce dependence between accounts

CISA recommends strong passwords and password managers. A manager can help create, store and fill different passwords, but its own access must be protected. Check vault protection and recovery. Do not keep the master password in an unprotected file alongside other credentials.

Add another layer of protection

When a service offers multifactor authentication, follow official instructions to enable it. Store recovery codes securely and separately from the authentication device. Before changing phones, check how to transfer access. Good security should let you recover an account without improvising.

Make small, regular reviews

Check connected devices and sessions when available. Remove access you recognize as old using platform guidance. Do not send passwords or verification codes to people requesting them by message. This guide organizes basic precautions; it does not guarantee protection from attacks or replace official support for a compromised account.

References to check

• CISA: creating and protecting passwords