Resources
Read the requested access before you approve a sign-in screen.
A calm recovery plan for the account and any reused passwords.
Separate a harmless session label from a real account takeover.
Check site access, purpose and publisher before you keep or remove it.
Protect the device, your phone number and the accounts it can unlock.
Restore one harmless file to prove that your backup works.
Tell a browser scare page from a Windows Security detection.
Handle repeated MFA approvals without accidentally letting someone in.
A sign-in token that can keep a browser authenticated.
Why a breach at one site can unlock a different account.
Malware that collects account data, often from a browser.
An emergency sign-in route when your normal MFA method is unavailable.
Repeated approval prompts designed to make you accept one.
On click, one website and all websites are different permissions.
Add a second check to a personal Microsoft sign-in.
Recognize, report and delete a possible phishing message.
Review Controlled folder access without changing your files.
A device-based sign-in method that replaces a typed password.
More than one kind of proof to sign in.
A deceptive message that asks you to click, open or disclose.