Prefer HTTPS sites, keep sharing off, avoid sensitive account changes when possible, and use cellular data or a trusted VPN when appropriate.
Step by Step
- Use the official settings or website for the account, device, browser, or service involved.
- Prefer HTTPS sites, keep sharing off, avoid sensitive account changes when possible, and use cellular data or a trusted VPN when appropriate.
- Review security and recovery settings after making the change.
- Keep recovery information and backups somewhere you can access if the primary device is lost.
If That Doesn't Work
- Never give an unsolicited caller or message sender your password, recovery code, or one-time verification code.
- If money or a critical account is at risk, use a known official contact method rather than contact information supplied in the suspicious message.