How to Protect Your Email Account: The Key to Everything

Your email account receives password reset links, bank notices and verification codes. That makes it the master key to your digital life.
Essential protections
- A long, unique password stored in a password manager.
- Two-factor authentication using an app, passkey or hardware key.
- Up-to-date recovery email and phone number.
Check for hidden changes
Attackers often add forwarding rules or filters to hide their activity. Review forwarding, filters and connected apps in your email settings.
Review sessions and devices
Look at the list of signed-in devices and remove anything unfamiliar. Sign out of all sessions after any suspicion.
Separate important accounts
Use a different email address for banking than for newsletters and shopping, so a leak in one place does not expose the other.


