Secure your accounts
Your goal: Apply the lesson to a realistic situation and explain your decision.
An account is a doorway to email, files and sometimes other systems. A stolen password can expose more than one service when it is reused. Start by identifying which accounts matter most and how an attacker could recover them. Protect the primary email account as carefully as the bank or work account it can reset. Good security also includes a recovery plan: know the trusted sign-in page, keep recovery methods current, and store recovery information where another person cannot casually access it.
Different passwords prevent a password stolen from one service being directly reused on another. A password manager can help manage them without relying on memory.
An unsolicited prompt may mean someone is trying to access the account. Deny it, use a known route to review activity and follow the account provider or employer response process.
Recovery codes can restore access and must be protected like credentials. Keep them accessible to the rightful owner while limiting access by others.
Multifactor authentication makes a stolen password less useful by requiring another factor. It reduces risk but does not remove the need to recognize scams or protect recovery routes.
Work accounts may have managed policies and approved tools. Follow the organization process so a well-intentioned change does not break access or expose company data.