We will never ask for your recovery phrase, keys or passwords. Nobody legitimate will.
Evergreen Study

Printable checklist · 9 points

Evergreen Study · evergreenstudy.com/checklists/securing-email-and-accounts/ · Reviewed 20 October 2026 · Printed

Securing your e-mail and accounts

Start with e-mail: it can reset the passwords of everything else.

Or press Ctrl+P (Cmd+P on a Mac). The printout leaves out menus and adds the site name, address and date.

  1. My e-mail account has a long password that I use nowhere else.
  2. Two-factor authentication is on for e-mail, preferably with an app, passkey or security key rather than text messages.
  3. Backup codes for my main accounts are written down and stored offline.
  4. Every important account has its own password, ideally kept in a password manager.
  5. The recovery e-mail address and phone number on each account are current and mine.
  6. I have checked for e-mail forwarding rules or filters that I did not create.
  7. I have reviewed signed-in devices and removed any I do not recognise.
  8. I open important accounts from bookmarks, not from links in messages.
  9. I know how to reach each service's official help page without a search engine.

Nobody from any service will ask you to read out a login code. If they do, hang up.

We will never ask for your recovery phrase, keys or passwords. General safety education, not financial advice. Free to print and share for non-commercial use.

The guide behind this checklist

Accounts: passwords, password managers, two-factor authentication and SIM swaps — Your e-mail account is the master key to every other account, so protect it first.

← All printable checklists