The account that controls everything.
WHY IT MATTERS MOST
Email controls password resets for nearly everything else.
Whoever holds it can take the rest.
WHAT TO DO
A unique strong password A second authentication step Recovery details current and independent
THE INDEPENDENT RECOVERY POINT
If recovery goes to an address on your own domain and the domain fails, recovery fails.
WHAT TO CHECK PERIODICALLY
Forwarding rules you did not create Filters moving or deleting messages Devices and sessions with access Applications granted access
THE RULE CHECK
A rule hiding messages from you is the classic sign of a compromised mailbox.
Check it specifically.
WHAT TO MONITOR
Login notifications.
WHAT TO DO IF COMPROMISED
Change the password from a clean device End all sessions Remove unauthorised rules and forwarding Check what was sent Warn anyone who may have received something
WHAT NOT TO DO
Assume changing the password is sufficient.
The rules and sessions persist.
