A different password for every service.
Use a password manager to create and store long, unique passwords. Protect the manager itself with a strong credential and second factor. Do not reuse an email password for your portal, WordPress or external services; one leak can expose other accounts.
Enable a supported additional factor.
Enable two-step authentication where available. Prefer passkeys or security keys when supported and suitable. Do not approve sign-in prompts you did not initiate or share one-time codes with support or anyone else.
Prepare recovery before you need it.
Check recovery phone and email details and keep control of them. Store recovery codes in a protected location separate from your main device. Avoid recovery that depends solely on the locked account itself. Follow the provider’s instructions to test your recovery options.
Individual accounts and least privilege.
Give each person the access their role needs and define who can manage billing, domains, DNS and production. Review permissions when roles change or someone leaves. Prefer supported invitations and delegation over sharing the main account.
Review sessions and devices.
Review recent access and authorized apps in the service you use. Remove unfamiliar or unnecessary sessions and integrations. Keep browsers, systems and devices updated. Sign out on shared computers and do not save credentials there.
If you lose control of an account.
Use the provider’s official address for recovery and a known support channel. From a trusted device, reset exposed credentials and revoke unfamiliar access. Also review accounts that depend on that email for recovery. Do not pay strangers promising to unlock accounts.
What have you reviewed?
Check the items you reviewed. Checkmarks stay on this page: they do not access your account or perform an audit.
Common questions.
Does Zovvi need my password or authentication code?
Do not send full passwords, authentication codes or recovery codes through support. Identification and recovery should follow the service’s account verification process.
Does completing this checklist prove my account is secure?
No. Checkmarks only record the items you reviewed on this page. They do not access your accounts, perform an audit or measure actual risk.
Further references.
Official guidance for exploring these practices further.