Losing access to online accounts can be catastrophic, especially now that we're so dependent on the Internet. Make sure 2-factor authentication is enabled. Use a secure option like an authenticator app. SMS-based 2FA is vulnerable to SIM swap attacks. issms2fasecure.com 
Recently, @kvn_l33 @bkaiser93 @jonathanmayer and I studied how easy it is to carry out SIM swap attacks on 5 major US prepaid carriers. We also found 17 websites on which user accounts can be compromised based on a SIM swap alone—no password breach needed. issms2fasecure.com
Nine websites remain insecure despite our responsible disclosure of these authentication vulnerabilities: Amazon, AOL, Finnair, Gaijin, Mailchimp, PayPal, Venmo, Wordpress(.com), and Yahoo. Check your password recovery and 2FA settings! freedom-to-tinker.com/2020/03/25/vul…
