Short answer: Settings → Login & security → two-factor authentication, then scan with any authenticator app. But check how you sign in first — if it’s “Continue with Google”, the security you need is on that account instead.

Short answer: a random four-word passphrase beats the short symbol-heavy password most people create, and a 20-character random string beats both. But uniqueness matters more than strength — and 2FA matters more than the password.

Short answer: Manage account → Security → two-step authentication, with a security key if you can. Then require it for all staff and collaborators — and check your payout bank details, because that’s the first thing an attacker changes.

Short answer: trusted device, new password, sign out all sessions — then hunt the forwarding rules, filters and recovery addresses. That fourth step is what almost everyone skips, and it’s why attackers come back.

Short answer: Upwork → Settings → Password & Security; Fiverr → Settings → Security. Pick the authenticator app on both. Your reviews and job history are the real asset — and they don’t transfer to a new account.

Short answer: Settings → Security Center → two-step verification, and choose the authenticator app if your account offers it. Then check your withdrawal bank details — on a payments account, that’s the field the whole attack is aiming at.

Short answer: fine on hardware only you use, risky everywhere else. The tick box stores a cookie that lets your password alone open the account from that browser — removing not just the barrier but the warning that something’s wrong.

Short answer: My eBay → Account settings → Sign in and security → 2-step verification, and take the passkey option if your device offers it. Then check your payout bank details — for sellers, that field is what the whole attack is aiming at.