> Check If You've Been Breached (And What to Actually Do About It)
Checking takes thirty seconds. Most people stop there, which is the part that doesn't help.
- Check your email address against Have I Been Pwned.
- If it shows up in a breach, the actual useful step is changing the password on that specific breached service - not panicking about every account you own.
- Check whether you reused that same password anywhere else. If so, change it there too - password reuse is what turns one breach into ten compromised accounts.
- Turn on two-factor authentication anywhere it's offered and you haven't already. This is the step that actually prevents most of the damage from a breach you don't yet know about.