Why this matters
If an attacker controls your inbox, they can reset passwords and seize your other accounts. Securing email is the single highest-impact step you can take.
Step by step
- Set a long, unique password stored in a password manager.
- Enable two-factor authentication, ideally with an app or security key.
- Review and remove unrecognized devices, apps, and forwarding rules.
- Be alert to phishing emails and never click suspicious links.
- Keep recovery details current and protected.
BlackCloak tips
Check for hidden forwarding or filter rules which are a common sign an account has been compromised. Use a separate, well-protected email account solely for banking and sensitive accounts.