Two-action verification and up-to-date recovery pointers are two ways to maintain your profile secure