Online communication guides
How to Protect Your Messaging Accounts
Use unique passwords, enable extra sign-in protection, review connected devices and prepare recovery options for your messaging accounts.
Use a different password for every account
Where a service uses passwords, choose a long, unique one instead of reusing a password from another account. A password manager can generate and store distinct passwords so you do not have to memorize them all. Protect the manager itself with a strong main password and additional sign-in protection where available. Never keep a password in a chat conversation.
Turn on additional sign-in protection
Look in the service’s security settings for multifactor authentication, two-step verification or passkeys. The available options vary by app. Follow the service’s setup instructions and store any backup codes somewhere private and accessible to you. An unexpected request to approve a login is a reason to investigate, not something to accept simply to dismiss the notification.
Check connected devices and active sessions
Review the devices or sessions that are signed in to your account. Sign out of entries you do not recognize using the official app or website, and investigate any unexplained activity. On a shared computer, avoid saving credentials and sign out when you finish. A screen lock and current software updates also help protect the device that holds your conversations.
Keep recovery options usable
Make sure your recovery email or phone number still belongs to you. Protect the recovery email account as carefully as your messaging account, because it may be used to reset access. Before replacing a phone, review how your service handles account recovery and authentication. Do not wait until the old device is unavailable to find out what you need.
Respond through official recovery channels
If you suspect a takeover, open the service’s official recovery instructions from a known address or its app. Secure the account and recovery email, review active sessions and tell contacts if someone has sent messages in your name. Do not pay strangers who promise to recover an account, and do not send them passwords or recovery codes. The exact recovery process depends on the service.
