Protect yourself · Cyber safety knowledge base

Securing your accounts

Keep control of your email, social media, mobile number and the accounts you use every day.

Practical guides

Find the guidance you need

Browse by topic or search for the situation you are facing.

5 guides available

Protect the accounts that unlock the rest

Your main email, mobile number and password manager help you recover other accounts. Secure them first, then banking, mobile money, government services and social media. An attacker who can reset your passwords may not need to know the old ones.

Your account security check

  • Use a different password for every service, or a passkey where supported.

  • Enable multi-factor authentication and keep a recovery method you can still use if you lose your phone.

  • Check that recovery phone numbers and email addresses belong to you.

  • Review signed-in devices, recent activity and connected apps. Remove access you no longer need.

  • Turn on security notifications and investigate unexpected changes using the app directly.

When you receive an unexpected sign-in alert

Open the service yourself rather than using a link in the message. Check its security activity. If the activity is unfamiliar, change the password from a trusted device, sign out other sessions and check recovery settings. Deny authentication prompts you did not initiate.

Keep a recovery plan

Store backup codes somewhere private and separate from the phone you normally use. A trusted emergency contact can know where to find your instructions without knowing your passwords. Review the plan when you change numbers or devices.

Useful references

Here to help

Something doesn’t look right?

Prepare an incident report with the details that matter.

Report an incident