Field guide

Fast defensive checklists.

Use these steps when something feels off. Do not include passwords, recovery codes, private keys, or identity documents in any request.

Account Looks Compromised

  • Change the password from a clean device.
  • Sign out of all sessions if the platform allows it.
  • Turn on MFA or passkeys before reconnecting apps.
  • Check recovery email, phone, forwarding rules, and connected apps.

Phishing Suspected

  • Do not reply, click new links, or share codes.
  • Capture screenshots and sender details.
  • Verify through a separate channel before acting.
  • Report the message inside the platform.

Device Feels Wrong

  • Update the operating system and browser.
  • Remove unknown browser extensions and apps.
  • Back up important files before major cleanup.
  • Use built-in security tools or trusted local support for scans.