Am I the only one who ignored the IT guy about 2FA until my email got hit from Manila?
A guy named Dave from our IT help desk kept telling me to turn on two factor for my personal email. I blew him off for like 8 months because logging in twice felt annoying. Then 3 weeks ago someone in Manila got into my account and tried to reset my bank password. Took me 20 minutes to lock it all down and I still find weird logins in my history. Dave, if you're reading this, I owe you a coffee. What's the one security tip you wish you had actually listened to sooner?
So when you say weird logins are still showing up in your history, are those new ones after you locked it down or just old ones you're now noticing? That part matters because if someone still has a session token or a backup email or phone number on your account, changing the password won't kick them out. Did you check the recovery options and any app passwords or connected devices too? Dave probably would have told you that step, and it's the one most people skip.