Understand the idea
If a leaked password was reused, more than one account may be exposed. Start with accounts that control recovery for others, such as email.
Put it into practice
From a trusted device, change reused passwords to unique ones, review sessions and enable supported second factors. Monitor the affected services for unfamiliar activity.
Know the limits
Changing one password does not automatically terminate every existing session across every service.
The wider context
Pause when a message creates urgency or asks for a secret. These notes focus on recognizing common warning signs and preserving evidence. They do not certify an operator or replace professional incident assistance. Report concerns through the affected service’s verified support and relevant local channels.
Your next step
Use the practical step above only where it fits your situation. Before an account-specific action, check the current instructions from the service or device provider involved. Write down what you observed and what remains uncertain; that makes a follow-up question more useful.