Area 2 of 7 · Passwords, two-step verification and account security
Secure Your Accounts
Most accounts are not hacked. They are opened with a password that leaked somewhere else. Close that door.

Learn: five habits
Naman explains what to do, and why it works.
One account, one password
Give every account its own password. Make it long: four or five random words work well.
Why: When one website leaks, attackers try the same password on your email, your bank and your social media.
Use a password manager
Let a password manager create and remember your passwords. Lock it with one strong passphrase and your fingerprint.
Why: You only have to remember one password, and it fills in passwords only on the real website.
Turn on two-step verification
Switch it on for email, WhatsApp, banking and social media. An authenticator app or a passkey is best. SMS is the minimum.
Why: A stolen password alone is then not enough to get in.
Guard your email first
Give your main email the strongest password and two-step verification before anything else.
Why: Your email can reset the password of every other account you own.
Keep recovery details current
Check the recovery phone and email once a year. Remove old numbers, and sign out of devices you no longer use.
Why: An old number is given to someone new. Whoever holds it can reset your password.
Red flags to remember
- A login alert from a city you have never been to
- A code arriving on your phone that you did not ask for
- A password reset email you did not request
- Friends saying they got strange messages from you
Play
Clear at least one. The games are short, and every answer is explained.
Start here · Decide
Not playedSecure This Account
Set up one email account, choice by choice: password, second step, recovery and more. See how strong you made it.
Sequence
Not playedAccount Hacked: Take It Back
Someone else is inside your email or social media account. Put the recovery steps in order.
Match
Not playedSafety Habits Match
Link each everyday safety habit to the trouble it saves you from.
Practise
Optional, and worth it: a longer exercise that asks for your name and email so that your result is saved.
Check
Five situations from this area. Score 80 or more to complete it.
Mini test: 5 quick situations
Pick what you would really do in each one. Score 80 or more to complete this area. There is no timer, and you can try as many times as you like.
- About 2 minutes
- No sign-up
- Nothing leaves your phone
Lost money to a scam? Call 1930 at once, then your bank, then file a complaint on cybercrime.gov.in. The first hour matters most.
Call 1930
