Locking down your accounts

Your email is the key to every other account, because password resets go there. Protect it first.

Five steps

• Use a long, unique passphrase for each account.
• Turn on two-step login (multi-factor) everywhere you can, starting with email.
• Save your recovery codes somewhere safe and offline.
• Keep your phone and apps updated.
• Never share login codes. No real company will ask you to read one back to them.