Password Safety: Unique Passwords, MFA and Recovery

Start with the accounts that unlock others

Your primary email account can receive password resets for many other services. Protect it, banking and business admin accounts first. Visit each provider directly, review its recovery contact details and check that you recognise active sessions. Do not follow a reset link merely because an unexpected message says your account is at risk.

Use a password manager thoughtfully

A password manager can help create and store unique passwords. Choose a reputable product from its official source, understand how its recovery works and protect the account used to access it. You still need a plan if the device containing the manager breaks or is lost. Avoid storing the only recovery copy inside the account it is meant to recover.

Set up MFA without handing over codes

Use the options supported by the service, such as an authenticator, security key or passkey. Save any issued recovery codes securely. Do not approve a sign-in prompt you did not initiate, and do not read codes to someone who called unexpectedly. For business accounts, coordinate changes with the administrator so another authorised person can help when needed.

What to do after a suspected leak

Change reused or exposed passwords from a trusted device, review recovery methods and investigate unexpected sign-ins. A changed password alone may not end every existing session; use the provider’s security controls. If money or work data is involved, contact the relevant organisation promptly.

NOXTech can guide account owners through setup and official recovery options. We cannot retrieve provider-held passwords or bypass MFA. If your problem is a Windows PIN rather than an online-account password, use our separate PC lockout guide: those sign-in methods are not interchangeable.