A more deliberate
way in.

Before you arrive.

Take a moment to name the task. “Read a document,” “change my profile,” and “recover access” can lead to different places, even within the same service.

• Begin from a saved address, the official app, or another route you already know.
• Read the full destination address instead of relying on the page title or logo.
• If a message unexpectedly asks for urgent action, reach the service independently and check there.
• Know which account you intend to use, especially when personal and work profiles share a device.

A secure-connection indicator describes a connection. It does not, by itself, establish that a website is the organization you intended to visit.

Read what the prompt changes.

Signing in, granting permission, and approving another sign-in can look similar. Read the action label and any context around it before proceeding on the actual service.

• Sign in: check which account and service are named.
• Allow access: read the information or actions being requested, and identify the requesting application.
• Approve a request: connect the request to an action you initiated. An unfamiliar approval is a reason to stop and investigate through the provider.
• Remember this device: understand that this may change what happens on a future visit.

Know what stays open.

A session lets a service remember an authenticated visit for a period of time. Its duration and behavior depend on the service, the browser, and any organization settings.

On shared equipment, check the visible account before working and use the service's sign-out control when done. A browser profile may contain separate sessions for several services. Signing out of one does not necessarily sign out of the others.

Keep a map, not a pile of secrets.

A simple account inventory helps you remember which services you use. Keep it somewhere appropriate for your circumstances and avoid including credentials or secret recovery material.

• Service name and a known website address.
• Whether the account is personal, work-related, or managed by an organization.
• The sign-in method you expect to use, described without secret values.
• Where to find the provider's recovery instructions and support information.

Review recovery contact details in the actual account settings when appropriate. Changes in phone numbers, email access, or work roles can change how a recovery route functions.

When access breaks.

Use the actual service's published recovery process through a known route. Account recovery is specific to the provider; this website cannot verify identity, reset credentials, or contact a provider on your behalf.

For managed accounts, check the organization's own support process. Describe the error and the step that produced it without sending passwords, recovery codes, or other secrets in an ordinary support message.