
A spare security key has to be enrolled before it can rescue a login
Buying a spare security key is not enough. Register and test it with each supported account, then store it separately from your everyday key.
Clear explanations for protecting accounts, managing devices and making everyday digital choices with fewer unanswered questions.
Review your recovery options →

Buying a spare security key is not enough. Register and test it with each supported account, then store it separately from your everyday key.

DNS over HTTPS encrypts the lookup between a browser and its DNS resolver. Understand what that protects and what it does not hide about browsing.

DKIM authenticates a signing domain and protected message content. It does not prove that an email’s request is honest or that the named sender authorised it.

Check whether an encrypted archive hides its filenames as well as its contents, and test the recipient’s experience before sending it.

A valid software signature helps establish publisher identity and file integrity. It does not replace checking the download source or trusting the software itself.

An email alias can give you another address without a separate inbox or account. Check sending behaviour and account links before relying on it.