Account access
Protect your access.
Passwords, multi-factor authentication, recovery options, and other boring habits that make important accounts harder to borrow.
Strong, unique access habits give you more options if one account is compromised.
Strong, unique passwords or passphrases
Use a different password for each important account. Longer is better. A passphrase—a few unrelated words strung together—can be easier to remember and harder to guess than a short complex one.
Multi-factor authentication
Turn on multi-factor authentication (MFA) where it's offered. It adds a second step, so a password alone isn't enough to get in. It's one of the most useful boring habits you can build.
Recovery information and device updates
Keep your recovery phone number, email, and backup options current so you can get back in. Update your device software and apps when prompted—updates often close gaps that are already known.
Reviewing access
Every so often, check which devices and apps have access to your important accounts. Remove ones you don't recognize or no longer use. Lock your device in a way that works for you.
Don't share passwords or codes
No legitimate organization will ask for your password or a one-time verification code. If someone asks for either, that's a reason to pause and verify through a known channel.
Try this now
Choose one important account and check whether multi-factor authentication is available.
What not to assume
Account security isn't all-or-nothing. Improving one important account is still useful.
Boring digital habits beat dramatic recovery stories.
Official Canadian resources
If you're in immediate danger, call 911 or your local emergency number when it's safe to do so.