1. A strong, different password for each account
Use a long phrase you can remember (for example 4 words plus numbers), and never reuse the same password. A password manager makes this much easier.
2. Turn on two-factor authentication (2FA)
Even if someone knows your password, they can’t log in without the second code. Prefer an authenticator app over SMS when you can.
3. Check connected devices
Facebook, Instagram, WhatsApp and Gmail all have a “Devices” or “Active sessions” list. Log out any device you don’t recognise.
4. Secure your email first
Your email is the key to all your accounts: whoever gets into it can reset your other passwords.
5. Be careful with links
Never type your password into a page you opened from a link in a message, even if it looks official.
If you think someone close to you is monitoring your accounts, change your passwords from a safe device, and don’t let them know until you are safe.