The first 10 minutes: securing a new account

The moment an account is delivered, do these three things - in this order - before anything else.

1. Change the recovery email first

Whoever controls the recovery email controls the account. Point it at an inbox only you can access.

2. Rotate the password

Use a long, unique password from a password manager. Never reuse one.

3. Turn on two-factor authentication

Once the email is yours, enable 2FA so a leaked password alone can't unlock the account.

• Prefer an authenticator app over SMS.
• Save the backup codes somewhere safe.

Then slow down

With security handled, resist the urge to post immediately. A calm first day is the healthiest start.

Browse verified accounts →