Most account takeovers do not begin with a dramatic hack. They often begin with an old password, reused credentials, or a device that was never removed from an account.
Start with your email
Review recent sign-ins, remove devices you no longer recognize, and turn on multifactor authentication. Your main email account deserves priority because it can unlock many other services.
Check password reuse
If the same password appears on multiple sites, replace it. A password manager can generate unique passwords and make this much easier.
Review active sessions
Sign out old phones, browsers and computers. This is especially useful after changing an important password.
Check recovery settings
Make sure your recovery email, phone number and backup codes are current and stored safely.
A short security review tonight can close several common paths into your digital life without requiring technical expertise.