Use the official sign-in flow
Enter credentials only on the provider’s genuine sign-in page or into a trusted application you intended to configure. Independent support pages should not present a form that imitates a provider’s login screen.
Check an unexpected support approach
- Pause if an unsolicited caller says the mailbox will be deleted immediately.
- Open the provider’s official help page independently.
- Keep one-time codes and recovery keys private.
- Do not install remote-control software because a pop-up tells you to call.
If you suspect compromise
Use a trusted device and the provider’s recovery process. Review sessions, recovery information, forwarding and filters after regaining access. Turn on a supported additional verification method and keep recovery information current.
If you choose independent assistance, ask what will be done and what it costs before authorizing work. You remain in control of account verification and any optional access.
Explore provider-specific guides for official configuration references.