Set up your account recovery options properly

Recovery options are how you get back in when something goes wrong — and, if set up carelessly, how an attacker gets in instead. A few minutes now saves a lockout later.

1. In each key account’s Security settings, set a recovery email and phone number you actually control.
2. Make sure the recovery email is itself protected with a strong password and 2FA.
3. Remove any old phone numbers or email addresses you no longer have access to.
4. Generate and safely store backup codes where the service offers them.
5. Avoid security questions with answers a stranger could find online — if forced, use random answers stored in your password manager.
6. Review these details once a year and whenever you change your phone number.