Knowledge Basics Tech

Updated: 10 September 2026 · Reading time: about 9 minutes An unfamiliar login, password-reset notice, message you did not send or changed recovery address can mean someone else has access to your account. Move quickly, but do not let panic push you into a fake “recovery service.” Use only the provider’s official app, a saved bookmark or a website address you independently know. First priority Secure the email account used to reset your other passwords. If email is compromised, an attacker may intercept recovery messages and regain accounts after you change them. If money, identity documents, workplace data or another person’s information is involved, contact the relevant bank, provider or administrator through a verified channel immediately. Signs an account may be compromised A login, device or location you do not recognise. A password, recovery phone, recovery email or security method changed without you. Messages, posts, comments, files or purchases you did...

Updated: 10 September 2026 · Reading time: about 9 minutes Two-step verification adds another proof of identity after—or instead of relying only on—a password. If someone steals your password, that extra check can stop them from entering your account. But the available methods do not all protect you in the same way. Best beginner choice Use the strongest method your important account and devices support. Passkeys or hardware security keys offer strong protection against phishing. For a Google Account, Google recommends prompts when you are not using a passkey. An authenticator app is a useful widely supported option. SMS is still better than a password alone, but it is more exposed to phone-number attacks. Always create a recovery plan. What does two-step verification mean? A password is something you know. A second step normally asks for something you have, such as a phone, authenticator app or security key. Some methods also use something you are, such as a fingerpri...