Email is the reset path for many other accounts. If someone controls your inbox, they can often take over banking, shopping, social, and work logins one by one.
Does this affect you?
Use this for Gmail, Outlook, Microsoft, Yahoo, iCloud Mail, ISP email, and other providers when you want to harden the account before anything goes wrong.
Lock down the essentials
These steps close the most common takeover paths.
- Set a long unique password for email, ideally 12 to 16 characters or more, and do not reuse it anywhere.
- Turn on two-factor authentication. In Google, use Security > 2-Step Verification. In Microsoft, use Security > Advanced security options. In Yahoo, use Account Security.
- Prefer an authenticator app or security key over SMS when offered because text codes can be vulnerable to SIM swaps.
- Confirm your recovery email and phone number are current and belong to you.
- Review connected apps and third-party access, then remove anything unfamiliar or unused.
- Check forwarding, POP/IMAP, rules, and filters for anything you did not create. Hidden forwarding is a common persistence trick.
Check for signs of access
Do this even if nothing obvious happened.
- Review recent activity or sign-in history for unfamiliar locations and devices.
- Check Sent and Trash for messages you did not write or deleted alerts.
- Review connected apps, forwarding rules, and recovery info again because attackers often change those first.
- If anything is unfamiliar, remove it, change the password again, sign out of other sessions, and enable 2FA.
More control
Security questions are passwords too
If your provider still uses security questions, save random unrelated answers in a password manager instead of using real facts someone could find.
Save backup access
Printed backup codes or a second trusted device can prevent a serious lockout if your phone or authenticator app is lost.
Avoid linked-login phishing
Never enter your email password from a message link. Go directly to the real provider’s website or app.
Sources
- Google – Secure your Google Account (2025)
- Microsoft Support – Help protect your Outlook.com account (2025)
- FTC Consumer Advice – Protecting your accounts from hackers (2025)