The most important account may be the email used to recover your other accounts. If that entry point is compromised, several services can be affected together. Map your email, device, phone number, and important services before changing settings one at a time. Passkeys and extra verification can improve security, while a working recovery plan remains necessary if the device is lost or replaced. Start with the accounts whose loss would interrupt daily life.
What to have ready
Before you start
FIDO Alliance explains the public-key basis of passkeys and their supported device arrangements. Check the service and device documentation for the actual setup and recovery behaviour; Hong Kong services do not all support the same methods. Review backup email, phone numbers, recovery codes, and trusted devices before making changes. Do not remove every existing route at once. A security improvement that leaves you unable to recover an essential account creates another practical problem.
What to do, step by step
- Use the genuine settings page to review your main email and phone, following the service's instructions when removing unfamiliar sessions or devices.
- Set up a supported passkey or extra verification on your own device. Understand device locking, any syncing arrangement, and available backup methods before relying on it.
- Store recovery codes or instructions securely without making the lost device their only location. Do not share codes with someone claiming to help recover your account.
- Test normal sign-in and the supported backup process, replace outdated numbers, then work through other accounts and record when you reviewed the settings.
Costs, timing, and things to check
Passkeys reduce certain phishing risks, but fake support, manipulated transactions, and compromised devices still require attention. Easier sign-in does not authenticate a stranger's payment request.
Recovery can involve checks and waiting. Treat requests to paste one-time codes into a chat or install unfamiliar remote-control software as reasons to stop and independently verify the contact.
A practical example
Before changing phones, confirm that the new device can access your email, the backup number still works, and passkeys are available through the documented process. Keep the old device until important services have been tested, then follow official transfer and clearing instructions. This sequence avoids discarding your only verification tool before the replacement is ready.
Improve security and workable recovery together, starting with the account that recovers other services.
Official information and enquiries
These are the reference and service entry points for this guide. Check current fees, eligibility, and schedules with the authority. The preparation date is not each source's official update date.