Checklist
Account Security Checklist
Account security is easier when you follow a repeatable checklist. Start with the accounts that control money, identity, business access, and password resets.
Critical accounts first
Protect email, banking, password manager, cloud storage, domain registrar, hosting provider, phone provider, and social media first. These accounts can create the highest damage if compromised.
Password checklist
Every important account should use a unique password. Replace reused passwords. Avoid personal facts. Do not save passwords in unencrypted documents.
- Unique password.
- 16+ characters where possible.
- Stored in a password manager.
- Never reused.
Authentication checklist
Enable two-factor authentication. Save recovery codes offline. Review backup email and phone settings. Remove old devices and unknown sessions.
Ongoing review
Security is not a one-time task. Review critical accounts every few months, after employee changes, after device loss, and after any breach notification.