iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
If an account was breached, secure it in this order: recover access through the provider, change its password to a unique one, sign out other sessions, enable multifactor authentication (MFA), then check recovery settings and account activity. If you cannot sign in, use the provider’s official recovery process first.
1. Recover access safely
If you are locked out, start from the service’s official website or app and follow its account-recovery instructions. The Federal Trade Commission’s account-recovery guidance points to resources for major services; Google and Microsoft also provide compromised-account instructions: Google and Microsoft.
Do not use recovery links in unsolicited messages. Navigate to the provider directly. If you suspect the device itself is infected, update its security software and run a full scan before changing the password. The FTC recommends scanning before account recovery, and Microsoft likewise advises a full malware scan before changing a password.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall2. Change the compromised password
Once you regain access, set a new password that is hard to guess and used nowhere else. The FTC’s October 2024 guidance suggests aiming for 12 to 15 characters or using a passphrase; treat that as a useful target, not a universal technical rule. Its advice is: “Change your account password. Create a unique and strong password that is hard to guess.” FTC, October 2024.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Never reuse the exposed password on another account. If you did reuse it, change it on those accounts too—especially your email account, which may be used to receive password-reset links for other services. A password manager can help generate and keep track of distinct passwords.
3. Sign out other devices and sessions
Open the account’s security, privacy, or device settings. Review signed-in devices and sessions, sign out anything you do not recognize, and use a global “sign out everywhere” control if the service offers one. Then sign back in only on devices you trust.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Controls and timing differ by provider. Google lets users review devices and sessions, but one device can appear with multiple sessions; background communication can also affect displayed session times. Review the details rather than treating every unfamiliar timestamp as proof of an intruder. Google’s device and session guidance.
Microsoft says its “sign out everywhere” action may take up to 24 hours and does not sign out Xbox consoles. Other services may behave differently, so do not assume that global sign-out takes effect immediately on every device. Microsoft’s sign-out guidance.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
4. Enable multifactor authentication
MFA requires an additional proof of identity beyond the password. Turn it on in the account’s security settings and choose a method the service supports that you can reliably access. The FTC’s relative guidance for the methods it discusses is:
| Method | What to know |
|---|---|
| Text or email code | Better than relying on a password alone, but the FTC says an authenticator app is safer than codes by text or email when those are the only choices. |
| Authenticator app | A safer choice than text or email codes when those are the only options, according to the FTC. Keep access to the app or its recovery method. |
| Physical security key | The FTC calls security keys the strongest method among those it discusses. A key works only with compatible accounts and devices; check service compatibility before choosing one. |
Availability varies by service, and a stronger option is useful only if you can keep using it. CISA also identifies a secure physical token as an MFA option. FTC MFA guidance; CISA MFA tip sheet.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
5. Check account settings and activity
Changing a password and signing out sessions may not undo settings an intruder added or messages they sent. Review the account for changes you did not make:
- Recovery email addresses and phone numbers
- Email forwarding rules and filters
- Sent and deleted email, including unexpected password-reset messages
- Social messages, posts, contacts, and connected apps
Remove unauthorized recovery details, rules, apps, posts, or contacts, and follow the provider’s instructions for securing any affected linked accounts. If the account sent messages, tell contacts not to click links or respond to requests for money that appear to come from you.
Quick Recap
Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
