Security checkup

Take a few minutes to run through these checks. Come back to them every few months, or whenever something about your devices or contact details changes.

1. Your email or mobile is current and verified

   It's where your codes go and how you get back in. Update it or verify it.

2. You have a passkey

   A passkey can't be guessed, reused or phished. Add a passkey.

3. Your password is yours alone

   If you use a password, make sure you don't use it on any other site. Make a strong password.

4. You recognise every place you're signed in

   Sign out of old phones, shared computers and anything you don't recognise. Review your sessions.

5. Your recent activity looks right

   Check the last 90 days for sign-ins or changes you didn't make. Review your activity.

Keep your devices safe too

• Lock your phone and computer with a PIN, fingerprint or face.
• Keep your browser, apps and operating system up to date.
• Only install apps and browser extensions you trust.
• Protect the email account your codes go to with its own strong password and extra protection.