Harden your most important online accounts against takeover and recover fast if one falls.
Cybersecurity & PrivacyPDF · 8 pages· v1.0
4.4Account takeover is how most people actually get hurt online: someone gets into your email, your social media, or your bank and uses it to drain money, scam your contacts, or lock you out. This playbook is about both preventing that and reacting correctly if it happens. It goes account-type by account-type - email, banking, social media, cloud storage, and your phone carrier - and explains the specific attack each one faces and the specific settings that stop it. You'll close the recovery loopholes attackers exploit, like weak security questions, stale recovery phone numbers, and forgotten authorized apps that still have access. This is for someone who has the basics (a password manager, some 2FA) but wants to genuinely harden their key accounts, and for anyone who has already been targeted and wants to make sure it can't happen again. The second half is a calm, ordered incident response: exactly what to do in the first 30 minutes if an account is taken over, how to regain control, how to find and reverse what the attacker did, and how to keep them from coming back through a recovery path you forgot to close. Most people, in a panic, change their password and stop - and the attacker is right back in an hour later through a linked app or recovery email. This guide closes every door.
Yes. Go straight to the 'First 30 Minutes' section. It's ordered so the most important actions come first, then walks you through regaining control and closing the back doors the attacker may have left open.
Passwords are one door. This focuses on all the other ways accounts get taken over - recovery emails, security questions, SIM-swaps, authorized third-party apps, and active sessions - and how to both lock and recover them.
The attacks and defenses are universal, so the guidance applies to any email, bank, or social provider. Menu names differ slightly between services, so the steps describe what to look for rather than exact button labels.
Stale recovery options and lingering authorized apps. People secure the front door but leave a recovery email they no longer control or an old app with full access. This guide makes you audit and close those.
Read the full refund policy and trust & safety terms.