GHOSTKIT/Account Security
03 · ACCOUNT SECURITY
Lock the doors before you deal with the rest.
Do this from a device and network you trust.
- Settings → Security and Login.
- Review where you're logged in and end unfamiliar sessions.
- Turn on two-factor authentication.
- Review recognized devices, login alerts and app passwords.
- Open Instagram → profile → menu → Accounts Centre.
- Review password and security / where you're logged in.
- Sign out unfamiliar devices.
- Turn on two-factor authentication and save recovery codes somewhere safe.
- Review connected apps, profile visibility, mentions, tags, messages and contact syncing.
Messenger
- Messenger security is tied closely to the Meta account. Secure Facebook/Accounts Centre first.
- Review devices/sessions and remove anything unfamiliar.
- Review privacy & safety settings and message controls.
- For end-to-end encrypted chat backup, understand the Secure Storage setting before deleting or resetting it because chat history can be affected.
Any account — emergency reset
- From a trusted device, change the password to a unique long passphrase.
- Change any other account that reused that password.
- Sign out all other sessions.
- Enable 2FA/passkey.
- Replace unknown recovery addresses/phone numbers.
- Revoke unknown third-party apps and browser extensions.
- Check forwarding rules and filters in the email account.