Skip to content

Secure my account

A short checklist for a secure online account. Tick what you have done. Your progress stays only in this browser (no names or accounts).

Password

Use a long, unique password per account (at least 16 characters or 6 random words).
Use a password manager instead of memorising or reusing passwords.
Choose the manager’s master password as a passphrase and use it nowhere else.
Check whether old passwords appear in data breaches and change those accounts.

Second factor

Enable two-factor sign-in – preferably with a passkey or security key, otherwise an authenticator app (TOTP).
Use SMS codes only if nothing better is offered.
Print recovery codes or store them encrypted and separately.

Account and recovery

Use a dedicated e-mail address for important accounts and protect it especially well.
Keep the recovery e-mail and phone number up to date.
Review active sessions and connected devices; sign out anything unknown.
Delete accounts you no longer use.

Devices and habits

Update the operating system, browser and apps automatically.
Protect the device with a screen lock and disk encryption.
Be suspicious of links in messages: type the address yourself or use a bookmark (phishing).
Make backups regularly, at least one offline or encrypted.
Store important files encrypted before they go to the cloud.