sten0 ✅ Call your CS reps, ask about policy, and poke around. Sometimes you can add notes to account to help protect and for others it's just good to know how "secure" you are.
Also start poking at various password reset methods and take note of what information they give out (even partial cell/credit #'s, account name, email addy etc can be big).
