The majority of account hacks are not due to the extraordinary skills of the hacker, but rather due to a few smaller mistakes that humans make:
1. Passwords that are reused
2. Lack of 2-factor authentication
3. Outdated software
4. Unattended phishing messages
When you regain access to your account, you may feel that you have solved the problem; however, unless you take steps to secure your account, it is very likely that you will have a similar incident again.
Step 1: Properly Secure Your Accounts
A. Create distinct strong passwords for all your accounts.
B. Enable 2-factor authentication (2FA) wherever possible.
C. Review your recovery options — ensure that your phone numbers and backup email addresses are up to date.
Even if your password is strong, attackers will typically take advantage of an account's weak recovery methods.
Step 2: Audit Applications and Services Connected To Your Account
A. Review all the applications and/or websites that are linked to your account.
B. Remove everything that you do not recognize or use.
C. Grant only the minimum amount of access needed for these applications/services.
Often, hackers are able to continue accessing an account through applications they linked to it in the past and have forgotten about.
Step 3: Be Aware of Phishing Attempts
A. Do not click on random links from emails or social media when you weren't expecting them to be sent to you.
B. If you receive an unexpected request for a password or payment information, confirm that the request was made to you by talking directly with the service about the message sent.
C. You should warn any friends or coworkers who may receive messages from you and ask them to talk to you if they receive a message or request for anything from them "from you".
Being aware of potential phishing attempts is the first step of securing your account.
Step 4: Update Devices and Software
A. Operating system, browser, and application updates should be installed immediately.
B. Security updates fix security holes that hackers can use.
C. For additional security, use a reputable antivirus or endpoint protection.
Your software is outdated if you do not update it and therefore you are leaving your door unlocked.
Step 5: Keep an Eye on Your Accounts
A. Regularly check your account's login information and devices accessed.
B. Enable notifications when there is an unusual login, an unusual change made to your account, or when the password reset happens.
C. Keep an eye out for unexpected account changes like reset or email changes.
The earlier you check; the sooner you can prevent your account from being hacked.
Step 6: Treat Security as Part of Your Daily Routine
A. Review your accounts and their security settings regularly, don't wait for a hack to do so.
B. As a reminder for you to Perform Routine Security Checks such as getting updated passwords, connecting your apps, and auditing your security settings at least once a month.
C. By performing small routine behavior and changing your password every 30–90 days, you could potentially prevent a significant number of your accounts being hacked repeatedly.
Key Takeaways
1. Recovery is only the first step; the next step is preventing future problems.
2. Consistent use of strong, complicated passwords and 2FA will significantly decrease the risk of your various accounts being continually hacked.
3. Be aware of using old permissions with third-party applications; they can be a distraction.
4. Being aware of phishing attempts and potential compromises will make a more significant difference than the use of tools alone.
5. By doing routine checks and updates on your accounts on a regular basis, you will change your response time from being reactive to being proactive to potential security issues.
Dealing with being hacked can add a lot of stress to anyone's day.
Consistently doing structured steps can prevent the same issue from occurring again.
