ENKR

Turn on two-step sign-in for email and banking

With two-step sign-in on, a leaked password alone is no longer enough to sign in on that account: the service also asks for a code or a confirmation on your device. Free.

Cost
free
Time
about 15 min
Where
Anywhere
Mark it done in my breach check

How to do it

  1. Open the security settings of your email account first: whoever controls it can reset most other passwords.
  2. Turn on two-step sign-in (2-step verification); prefer an authenticator app or a passkey over text-message codes.
  3. Do the same for banking, shopping and social media accounts.
  4. Save the backup codes the service gives you and keep them offline.

What it does

Taking over an account through its recovery questions or address
makes it harder
Logging in to your other accounts with the leaked password
makes it harder