Protect the accounts that unlock the others
Identify your primary email, recovery account and other important services. Use strong unique credentials and enable available multifactor authentication. A password manager can help organize unique passwords.
Keep a simple review list
Check that software updates are enabled, recovery details are current and former devices no longer retain unnecessary access. Use the provider’s settings rather than a link in an unexpected message.
Plan a response
Keep official support and recovery routes somewhere you can find them. If something goes wrong, a clear record of the affected service and the changes you made is more useful than a vague sense that everything might be exposed.