Most hacked accounts aren’t hit by complex attacks but by reusing a password that already leaked elsewhere. Three tools are enough to protect yourself effectively.
1. A password manager
It generates and remembers a long, unique password for every site. You only need to remember one master password — make it long: a phrase of several words works very well.
2. Two-factor authentication
- Prefer an authenticator app or a security key over SMS.
- Enable it first on your main e-mail: it is what resets every other account.
- Keep backup codes offline.
3. Passkeys
A passkey replaces the password with a key pair stored on your phone or computer, unlocked by fingerprint, face or device PIN. It can’t be guessed and resists phishing, because it only works on the real site.
Practical tip
Start today with three accounts: your e-mail, your bank and your main social network. Unique password, two-factor enabled, passkey if the service offers it. The rest can follow gradually.
