Knowledge Basics Tech

Quick answer: Open Google’s official Security Checkup , sign in on a device you trust, and work through every recommendation. Pay special attention to unfamiliar devices, recent security events, recovery options, two-step verification, saved passwords, and third-party access. A Security Checkup is not a virus scan. It is a guided review of the settings and activity that protect your Google Account. Because one Google Account may hold Gmail, Photos, Drive files, contacts, and recovery access for other services, a short review can prevent a much larger problem. Before you begin Use your own updated phone or computer, not a public or shared device. Type myaccount.google.com yourself or use a saved bookmark. Do not follow an unexpected “security alert” link. Keep your phone nearby in case Google asks you to verify that it is you. Allow enough time to investigate anything unfamiliar instead of dismissing warnings quickly. 1. Review recent security events Start with event...

Updated: 10 September 2026 · Reading time: about 9 minutes Online safety is not one special app or one perfect setting. It is a small group of repeatable habits that reduce the chance of account theft, scams, lost data and unwanted access. You do not need to become a cybersecurity expert. Start with the accounts and devices that would hurt most to lose. If you only have 15 minutes Update your phone and browser. Give your primary email a unique password. Turn on a strong second sign-in method. Check recovery phone and email details. Back up the files and photos you cannot replace. Why these habits work together Each habit covers a different failure. Updates close known software weaknesses. Unique passwords prevent one breach from spreading. Multi-factor authentication adds another barrier. Backups reduce the damage from loss or ransomware. Independent verification defeats many scams. If one layer fails, another may still protect you. The U....

Updated: 10 September 2026 · Reading time: about 9 minutes An unfamiliar login, password-reset notice, message you did not send or changed recovery address can mean someone else has access to your account. Move quickly, but do not let panic push you into a fake “recovery service.” Use only the provider’s official app, a saved bookmark or a website address you independently know. First priority Secure the email account used to reset your other passwords. If email is compromised, an attacker may intercept recovery messages and regain accounts after you change them. If money, identity documents, workplace data or another person’s information is involved, contact the relevant bank, provider or administrator through a verified channel immediately. Signs an account may be compromised A login, device or location you do not recognise. A password, recovery phone, recovery email or security method changed without you. Messages, posts, comments, files or purchases you did...

Updated: 10 September 2026 · Reading time: about 10 minutes A phishing message pretends to be a trusted company, service or person so that you will reveal information, send money, install something or open a fake sign-in page. Modern phishing can look polished, use a real logo and mention current events. Spelling mistakes are no longer a reliable test. The safest response Do not use the message’s link, attachment, QR code, phone number or reply button. Open the company’s official app, use a bookmark you already trust, or type a known address yourself. Check the account there. If the alert is real, the same issue will normally appear in the genuine account. A 60-second phishing check Stop. Urgency is designed to shorten your thinking time. Ask whether you expected it. An unexpected invoice, delivery problem, job offer or security alert deserves extra caution. Check the actual sender. A display name can say “Your Bank” while the address belongs to an unrelated...

Updated: 10 September 2026 · Reading time: about 9 minutes Two-step verification adds another proof of identity after—or instead of relying only on—a password. If someone steals your password, that extra check can stop them from entering your account. But the available methods do not all protect you in the same way. Best beginner choice Use the strongest method your important account and devices support. Passkeys or hardware security keys offer strong protection against phishing. For a Google Account, Google recommends prompts when you are not using a passkey. An authenticator app is a useful widely supported option. SMS is still better than a password alone, but it is more exposed to phone-number attacks. Always create a recovery plan. What does two-step verification mean? A password is something you know. A second step normally asks for something you have, such as a phone, authenticator app or security key. Some methods also use something you are, such as a fingerpri...

Updated: 10 September 2026 · Reading time: about 10 minutes A strong password is not a clever word with one capital letter and a symbol. The safest practical system is simpler: use a different long password for every account, let a trustworthy password manager create and store most of them, and protect the manager itself with a strong master password and multi-factor authentication. Quick answer Never reuse an important password. Use a password manager to generate a long, random password for each account. If you must remember one password, use a long passphrase that is not based on personal facts. Turn on multi-factor authentication, especially for email, banking and the password manager. Change a password when it is exposed, reused or suspected of compromise—not merely because the calendar changed. The most important rule: every account gets a unique password Password reuse turns one breach into many account takeovers. Imagine that a shoppi...