A practical account privacy check

Start with the account that unlocks the others

Your main email account often receives password reset links, invoices and identity information. If you have limited time, secure that account first. Check its recovery email address, phone number and active sessions. Remove devices you no longer use or do not recognise, following the service's instructions.

Then list your other important accounts: banking, education, work, cloud storage, government services and social platforms. You do not need to fix everything in one sitting. Choose one category at a time and keep a simple record of what you have checked. Never put actual passwords into a shared school document or an unsecured checklist.

Make sign-in harder to steal

Use a unique password or passphrase for each account, or a passkey where the service supports it. A reputable password manager can help you maintain different credentials without memorising all of them. Reusing one password means a problem at one service can expose accounts elsewhere.

Turn on multi-factor authentication when available, especially for email and financial accounts. Store recovery codes securely and understand how to regain access before replacing your phone. Do not share a verification code or approve an unexpected sign-in request because someone claims to be helping you. Open the official service yourself if an alert worries you.

Check who can reach and locate you

Privacy controls are separate from sign-in security. Review who can see your posts, send messages, tag you or find you through your phone number. Turn off location sharing you do not need. A private profile may still show a name, photo or biography publicly, so inspect the outside view where possible.

Look at permissions on your device too. Does a simple editing app need access to every photo or your precise location? Remove permissions that are unnecessary for the task. If you share a family device, use separate user profiles when possible and sign out of sensitive services rather than assuming the next person will avoid them.

Check what a linked account can access

Signing into an app with a larger service can save time, but it can also create connections you forget about. Find the section of your account settings listing connected apps and services. Check each one against what you still use and whether its access makes sense. Removing a connection does not necessarily erase information already shared. If you want to close an old account or request removal of its data, consult that app's own privacy and account controls as well.

Make a plan for shared and old devices

Before selling or giving away a device, follow the manufacturer's guidance for backing up, signing out and resetting it. Check that authentication tools and important files are working on your new device first. A rushed reset can leave you locked out of accounts you still need.

Public or borrowed devices require extra care. Avoid saving passwords, sign out when finished and do not leave documents in download folders. If you accidentally stayed signed in, use the account's security page on a trusted device to end other sessions. Changing a password alone may not be the only action the service recommends.

Respond calmly if something seems wrong

Unexpected password resets, messages sent without you or unfamiliar transactions deserve attention. Go directly to the service through its official app or a known website. Use its account recovery process and check the Australian Government's cyber security guidance. If money is involved, contact your bank promptly through a verified number.

If another person monitors your accounts or becomes angry when you change settings, consider personal safety before making visible changes. Seek support using a safer device if needed. Privacy is not a one-time achievement. A short check after a new device, new app or major life change can prevent old permissions and forgotten sessions from accumulating unnoticed.