Secure your email and password manager first: they are often the path to resetting other accounts. Use unique, randomly generated passwords and enable a strong second factor, preferably a phishing-resistant option where supported. Store recovery codes separately and keep recovery email and phone details current.
Review active sessions and connected applications, remove access you no longer use, and install security updates. For urgent messages, open the service directly instead of following a supplied link. Avoid pasting real passwords into arbitrary strength checkers; audit reuse with a trusted local manager and replace weak credentials. Do one account at a time and record the completed changes so the plan remains manageable.
Akousa