Begin with your recovery chain
Your primary email account often receives password-reset links for other services. Start there, then work through your password manager, device account and other important logins. List account names on paper; you do not need to collect passwords in a worksheet.
Give each account its own password
Use a password manager to create and store strong, unique passwords. Reusing a password means a breach at one service can threaten another. Protect the manager with a strong master password you can remember and the extra authentication options it supports.
Move one account at a time. Check that the new login works before closing your existing session, and follow the manager’s documented recovery process.
Add another factor
Enable multifactor authentication on important accounts. Follow the service’s setup instructions and keep its recovery codes somewhere safe. Think about what happens if the phone or security key you normally use is unavailable.
Where supported, investigate passkeys or security keys. Different services offer different recovery options; understand those options before relying on a single device.
Practice getting back in
Review the recovery email address and phone number shown in each account. Remove details you no longer control. Check that you can find your recovery information without unlocking the device it is meant to replace.
For example, a recovery code stored only on a lost phone will not help recover access from that loss. A separate protected copy gives your plan another path. Avoid testing recovery by deleting working credentials or signing out everywhere at once.
Keep the habit small
Turn on software updates, watch for unexpected login or reset messages, and revisit account access when changing devices. Open account settings directly instead of following a surprising message’s login link.
Track your next steps with the digital independence checklist.