Enable two-factor authentication on your email admin account

Two-factor authentication on your email admin account protects the single most consequential account you have, since email access is frequently the recovery path for every other account, a compromised email admin account can cascade into a much broader compromise.

Email is often the master key to password resets across your entire digital footprint, protecting this specific account matters disproportionately more than most other individual accounts.

How to do it

1. 1
   Enable 2FA on your email admin account specifically

   Not just individual mailboxes, the actual administrative account controlling your email domain settings.
2. 2
   Use an authenticator app rather than SMS where possible

   SMS-based 2FA is vulnerable to SIM-swapping attacks, an app-based or hardware key method is meaningfully stronger.
3. 3
   Store backup codes securely

   Somewhere safe but accessible if you lose your primary 2FA device.