I just helped a friend whose primary e-mail account had been taken over by a 3rd party and outlined a long list of steps & guidelines to help them recover their online life. Having an authoritative source for guidance and steps would be amazing. Recommendations for security key vendors, strict guidance on password re-use, and common-sense guidance around using (or not) SMS for 2FA would be great.
I just helped a friend whose primary e-mail account had been taken over by a 3rd party and outlined a long list of steps & guidelines to help them recover their online life. Having an authoritative source for guidance and steps would be amazing. Recommendations for security key vendors, strict guidance on password re-use, and common-sense guidance around using (or not) SMS for 2FA would be great.