Improve online privacy and account safety with practical guides for phishing, scams, suspicious sessions, compromised devices, privacy settings and unauthorized access.
If you clicked a phishing link, close the page and do not enter more information. If you entered a password, change it from the service’s official site or app, then end unknown sessions and turn on 2FA. Check for downloads or new extensions, scan the device, report the message, and use official recovery if account details changed.
Open your account provider’s connected-apps, third-party access, or apps-and-integrations page. Review each app’s name, purpose, and permissions, then remove access for apps you no longer use or cannot identify. Confirm that the app disappears or shows no active access. If an app is unfamiliar, secure the account separately and stop before approving any new request.
Open the account’s Security or Sign-In & Security settings, select Two-Factor Authentication, 2-Step Verification, or MFA, then follow the setup prompts. Prefer a passkey or authenticator app over SMS when the service offers it. Save the recovery codes offline, add a second recovery method, and test a fresh sign-in before ending the session.
Open the platform’s Privacy or Account settings and restrict who can add you to groups to the most limited available choice, such as contacts or approved people. Also tighten message requests, block the sender, leave the current chat, and report repeated abuse. Menu names differ, so verify the change by checking the saved setting.
Use your email provider’s message-list controls to report suspicious mail as spam or phishing, block the sender, and delete the message without opening it. Unsubscribe only when you recognize the sender and independently confirm the company’s real website. If messages mention password changes, payment problems, or account alerts, stop treating them as ordinary marketing and visit the account directly.
Sign out of your Google Account on every device from Security > Your devices. Verify remote sign-out and secure access if an unfamiliar session remains active.
Learn how to inspect an email link without opening it, verify the real domain, use safe scanners, spot redirects, and report phishing safely before clicking.
Learn how to review Google Account security events, Gmail sign-in history, dates, times, and IP details, then respond safely to activity you do not recognize.
Report a fake social media account impersonating you, preserve evidence, protect your real account, and verify the platform has removed or restricted it.
Remove an unfamiliar device from your Apple Account, verify whether access ended, then change your password and review two-factor authentication settings.