YOUR FIRST GUIDE
Protect my email, step by step
Your email receives password reset links for your other accounts. Start here, on an up-to-date personal device. Allow 15–25 minutes; you can do just one step today.
Reading: 3 min · Last revised: 7 September 2026
Already suspect a compromise? Open the emergency guide →0/3 steps completed
Progress is saved in this browser and shared with your checklist.
STEP 1 · 5–10 min
Give your email a unique sign-in
Open your email provider’s security settings yourself. If you reuse its password, replace it with a long random value generated and saved by a password manager. If you choose a passkey, create it on a personal locked device. Keep your existing protections enabled.
Choose and set up a password manager →STEP 2 · 5–10 min
Add protection when signing in
In account settings, set up a passkey or security key if supported. Otherwise, turn on two-factor authentication with an authenticator app. If only SMS is offered, enable it: it still helps. Never give a sign-in code to someone who asks for it.
Understand sign-in methods →STEP 3 · 5 min
Prepare account recovery
Check your recovery email address and phone number. If backup codes are offered, keep them offline somewhere safe. Otherwise, follow your provider’s recovery process and note how to find it. Keep your current session open during setup.
Prepare recovery methods →
Go at your own pace
You can return to these steps. Your checklist then suggests next actions for your devices, backups and other accounts.
View my checklistSources for this guide: Google, FIDO Alliance, FTC.