What should I do if I think one of my accounts has been hacked?

Fortunately, I’ve never had a major account takeover, but I have received security alerts that made me stop and investigate.

Those experiences reinforced the importance of using strong passwords, enabling two-factor authentication, and paying attention to login notifications. Sometimes a warning turns out to be harmless, but I’d much rather spend a few minutes verifying an alert than ignore a legitimate problem.