Academics · Adult Learning
Most people have dozens of accounts and no clear picture of which ones are safe. List each one with how it signs in, whether the recovery phone and email still work and whether the password is used anywhere else. The guide counts what to fix, puts money, ID and email accounts first and explains each step in plain words. It never asks for a password.
The worked example is made up: a credit union account set up well, a main email account that needs work, and an old shopping account with a saved card. Saved on this device only, and no passwords are ever stored.
Loading the account form. If nothing appears, turn on JavaScript.
Academics · Adult LearningFree
Almost every site resets a forgotten password by sending a link to your email. Whoever controls your email can reset the rest, which is why it comes first: two-step sign-in on, a password used nowhere else, and recovery details you still have. A bank or benefits account comes next, then everything else.
Two-step sign-in asks for something besides your password: a code from an app on your phone, a passkey, or a code sent by text. Federal security guidance from CISA and NIST treats any of these as much safer than a password alone, with app codes and passkeys stronger than text messages, which can be redirected if someone takes over your phone number.
The worked example is made up. Never type a password into this page. Settings menus differ by site; look for “security” or “sign-in” in the account settings. Nothing you type is sent to Caveat. Support: team@caveatacademic.com.