Separate the intimate identity

Create an address used only for adult or relational services. It should not contain your name, company or public username. Separation makes automatic correlation after a breach more difficult and makes suspicious messages easier to monitor.

Avoid social sign-in when separation is the goal. The button is convenient, but links identities and may share profile information according to the permissions granted.

Unique passwords without relying on heroic memory

Password reuse turns a breach of a secondary service into a key for the primary email account. Use a manager to generate a long random value for each site. The only secret to remember becomes the vault password.

Enable breach alerts where offered. Do not change every password on an arbitrary calendar; change one immediately when it has been exposed or shared and review active sessions.

Enable two-factor authentication

2FA asks for a second factor when a new device signs in. An authenticator app or hardware key generally resists interception better than SMS, but use the strongest option the service supports.

Store recovery codes in the manager or a secure offline location. Never approve a prompt you did not initiate: it may indicate that someone already has the password.

Close everyday privacy leaks

Hide notification content on the lock screen, use neutral app labels where the operating system allows it and review connected devices. End old sessions and delete abandoned accounts instead of merely removing the app.

Keep the phone, browser and apps updated. Limit browser extensions, especially those allowed to read every page. Finally, prepare recovery access: email credentials, 2FA codes and the service’s support address.

Frequently asked questions

Is SMS a bad form of 2FA?

It is generally less robust than an authenticator app or hardware key, but remains better than no second factor when it is the only option.

Does a password manager need to be paid?

Not necessarily. Prioritise a reputable, maintained tool that supports your devices and offers secure export.

Sources and verification

Features, policies and rules can change. We favour official documents and display each article’s update date.