Start with your key account
Your email account is often the password recovery point for other services. It is a sensible place to begin a security review. Choose a unique password, enable multi-factor authentication where available and check recovery details. Storing recovery codes only inside that same account can leave you stuck if access is lost.
Before following a link
A logo and a displayed sender name do not prove that a message is genuine. For an unexpected sign-in request, open the service yourself instead of using the message link. Pause when messages demand urgency, passwords or verification codes. Confirm unusual requests from a familiar account through a separate channel.
A short monthly review
Review device updates, active sessions and permissions for apps you no longer use. Export any needed information before closing an account. Security is an ongoing habit: a few repeatable actions are more useful than a long checklist that stays untouched. If an incident looks suspicious, use the service’s official support channels.
Curiosity continues with the next question.
