Turn on two-factor authentication (and don't lock yourself out)

Two-factor authentication (2FA) means a stolen password alone isn't enough to get into your account.

1. Install an authenticator app: Google Authenticator, Microsoft Authenticator, Aegis or 2FAS all work.
2. In the account's security settings, find Two-factor, 2-step verification or Login verification.
3. Choose Authenticator app rather than SMS when you can. SMS codes can be stolen by moving your number to another SIM.
4. Scan the QR code with the app and type the 6-digit code it shows to confirm.
5. Save the backup codes. Print them or write them down and keep them somewhere safe at home. They're your way back in if you lose your phone.

Start with your email account. Whoever controls your email can reset the password of almost everything else.