Prevention Center
Stop hacks before they happen
Most account takeovers are preventable. Follow these simple steps for each platform you use.
Platform security guides
Google & Gmail
- ✓Turn on passkeys or 2-Step Verification with an authenticator app
- ✓Run the Google Security Checkup every 3 months
- ✓Keep recovery email and phone up to date
- ✓Remove unknown devices and third-party app access
YouTube channels
- ✓Use a Brand Account with at least two trusted owners
- ✓Never download 'sponsorship' files or run unknown installers
- ✓Review channel permissions and remove old managers
- ✓Use a separate browser profile for channel admin work
Facebook & Instagram
- ✓Enable two-factor authentication with an authenticator app
- ✓Check Accounts Center for unknown logins
- ✓Ignore 'copyright violation' or 'blue badge' messages
- ✓Only verify through the official app, never a link
- ✓Turn on two-step verification PIN
- ✓Never share the 6-digit registration code with anyone
- ✓Check Linked Devices regularly
- ✓Beware of 'friend in trouble' money requests
Email accounts
- ✓Use a unique long password stored in a password manager
- ✓Check forwarding rules and filters for unknown entries
- ✓Enable login alerts
- ✓Never approve sign-in prompts you did not start
Domains
- ✓Enable registrar lock and 2FA at the registrar
- ✓Keep WHOIS/registrant email on an address you control
- ✓Turn on auto-renew with a valid payment method
- ✓Watch for fake 'domain expiry' emails
Hosting & servers
- ✓Use SSH keys instead of passwords
- ✓Keep control panels behind 2FA
- ✓Apply security updates promptly
- ✓Keep off-site backups and test restoring them
WordPress websites
- ✓Update core, themes and plugins weekly
- ✓Remove unused plugins and admin users
- ✓Use only plugins from trusted sources — never 'nulled' ones
- ✓Add 2FA for all administrators
Red flags to watch for
- Urgent messages threatening account deletion
- Requests for a code, OTP or password — from anyone
- Links to login pages that arrive by DM, SMS or email
- Files presented as contracts, invoices or sponsorship offers
- Anyone offering to 'hack back' or recover accounts for a fee without ownership proof