Why your email is the master key and how to harden it
Almost every other account can be reset through your email. If a scammer owns your inbox, they can quietly own everything else. Treat it accordingly.
- Give your email its strongest, unique passphrase, used nowhere else.
- Turn on two-factor authentication or a passkey on the email account itself.
- Review the account’s recovery options — the backup phone and alternate email — and make sure they are current and yours.
- Check for forwarding rules or filters you did not set, a classic sign someone has been in your inbox.
- Review which apps and devices are connected, and remove any you do not recognise.
- Be wary of any email asking you to log in via a link — go to the site directly instead.
Still stuck after those?
You’ve done the right thing by trying. Send whedo.it a quick note — what you tried, what you saw — and a senior pair of eyes will be on it the same business day.