What is a prudent first step when you receive an unexpected password-reset email with a link?

What is a prudent first step when you receive an unexpected password-reset email with a link?

• A. Click the link to verify content.
• B. Enter the old password to test.
• C. Reply asking for more details.
• D. Verify through official contact channels, not by clicking the link.

Answer: (D)

When you get an unexpected password-reset email, the safest move is to verify its legitimacy through official channels rather than interacting with the email itself. This helps you spot phishing attempts that try to steal your credentials or install malware. By going directly to the service’s official site or app (typing the URL you know or using a trusted bookmark) or contacting their support through verified contact methods, you can confirm whether a real reset was requested. If you didn’t request a reset, you can ignore the message and take steps to secure your account, like changing your password from the official site and enabling two-factor authentication. Do not click the link, do not enter any password, and do not reply with sensitive information.

When you get an unexpected password-reset email, the safest move is to verify its legitimacy through official channels rather than interacting with the email itself. This helps you spot phishing attempts that try to steal your credentials or install malware. By going directly to the service’s official site or app (typing the URL you know or using a trusted bookmark) or contacting their support through verified contact methods, you can confirm whether a real reset was requested. If you didn’t request a reset, you can ignore the message and take steps to secure your account, like changing your password from the official site and enabling two-factor authentication. Do not click the link, do not enter any password, and do not reply with sensitive information.