Passwords & Accounts
Passphrases, two-factor authentication, recovery routes and what to do after a hack.
What good looks like
Three unrelated words plus a number and a symbol beats a short complicated password. Every important account gets its own — a password manager makes that realistic.
Turn on two-factor authentication
Start with email, then the app store account, then games and social accounts. An authenticator app is stronger than SMS, but SMS is far better than nothing.
Recovery matters as much
Check the recovery email and phone number on each account. Most account takeovers succeed through recovery, not through guessing.
If an account was hacked
Change the password from a different, trusted device, sign out all sessions, check recovery details and connected apps for anything you did not add, then turn on two-factor authentication.
Never share
No legitimate service, and no Project OWL feature, will ever ask for a password or a one-time code.