Protect your data
in 6 simple steps

The first step is knowing if you've already been affected. Use PassMonitor to check your email for free. If it appears in any breach, you'll know exactly what data was exposed and when.

Most people use the same password across multiple sites. If one leaks, all of them become vulnerable. A strong password has at least 12 characters and mixes uppercase, lowercase, numbers and symbols.

• Never reuse passwords across different sites
• Avoid personal data like your name, birthday or pet's name
• The longer the better. Passphrases work really well
• Change it immediately if you learn of a breach

Two-factor authentication adds an extra layer of protection. Even if someone discovers your password, they can't access your account without the second factor, which can be a code on your phone or a security key.

• Enable it on email, banking, social media and any important account
• Prefer apps like Google Authenticator or Authy over SMS
• Keep your recovery codes in a safe place
• Never share verification codes with anyone

Nobody can memorize dozens of strong, unique passwords. A password manager does it for you: it creates, stores and auto-fills passwords across all your devices.

Scammers impersonate companies, banks and even friends to steal your data. These messages look real, but there are always signs that give away the fraud.

• Messages with extreme urgency: "your account will be locked in 24h"
• Links that don't match the company's official website
• Requests for passwords, verification codes or banking details
• Spelling errors or strange email addresses
• Deals that seem too good to be true

If you've discovered you were a breach victim, don't panic. Follow these steps in order:

1. 1 Change the password for the affected service immediately
2. 2 If you used the same password elsewhere, change it on all of them
3. 3 Enable two-factor authentication wherever you haven't yet
4. 4 Monitor your bank statements for unusual activity
5. 5 Be suspicious of unexpected contacts in the days following the breach