Advanced security

Most of your accounts (bank, social media, online services) are linked to your email address. If someone gets into it, they can reset all your passwords.

1. Turn on two-step verification (2FA) : at least by SMS, ideally with an app (Google Authenticator, Authy).
2. Use a strong, unique password, at least 12 characters long, mixing letters, numbers and symbols.
3. Check connected devices and immediately log out any you don’t recognise, in the security settings.
4. Turn on login alerts : Gmail and Outlook warn you as soon as an unusual login occurs.
5. Never open attachments from an unknown sender. They can install malware.

These signs should alert you immediately:

An alert doesn’t necessarily mean your account has been hacked. Start by checking, without clicking in the message.

1. Read the message carefully. Where does it come from? A real alert always arrives through the official app. Fake alerts exist too.
2. Go directly to the official app : don’t click the links in the alert email, type the address yourself.
3. Check recent activity and connected devices in the security settings. Log out any device you don’t recognise.

If a suspicious login is confirmed, act in this order:

1. Change the password immediately, from another device if possible, as the compromised device may be spied on.
2. Check the recovery address : the recovery email and phone number must really be yours.
3. Turn on or strengthen 2FA. If it wasn’t on, turn it on now. If possible, switch from SMS to an authenticator app.
4. Check the access granted : in the settings, remove third-party apps that have access to your account.
5. Notify your contacts : your loved ones may receive fraudulent messages sent in your name.
6. Report to the service concerned : Gmail, Outlook and social networks have a procedure to recover an account and report a hack.

A password manager creates, stores and fills in your passwords for you, in an encrypted vault. The one we recommend: Bitwarden (free, open source).

1. Download Bitwarden on the Play Store. Create an account with your email.
2. Choose a long, memorable master password, for example a sentence: MyDog$Loves#TheForest2026. Never a date of birth.
3. Turn on 2FA on Bitwarden itself. It is the safe for all your passwords: it deserves double protection.
4. Save your recovery codes somewhere safe, not on your phone.
5. Gradually import your accounts, starting with the most sensitive ones (email, bank, social media).