1) Sababta loo beegsado
Koontooyinka waxaa loo adeegsadaa khiyaano, diris spam, ama madax-furasho.

2) Dejinta lagama maarmaanka ah
Eray-sir adag oo gaara (password manager isticmaal).
2FA ku daar (app/hardware key).
Warbixin soo-celin: email/telefoon sax; backup codes meel ammaan ah ku keydi.
Maamulka: koontooyin admin gaar ah; ka saar shaqaalaha ka tagay; doorar xadidan.
Kulan-fiirin bil kasta; ka bax qalabka duqoobay.
Ownership: Facebook Business Manager/Telegram Owner—si cad u magacaw mulkiilayaasha.

3) Qaababka caanka ah ee la wareegista
“Policy violation” phish oo leh bog login been abuur ah.
WhatsApp 6-digit oo lagu waydiisto DM.
SIM-swap oo keena reset password.
Extensions mashaakil leh oo cookies akhrista.

4) Calaamadaha & nadaafadda link-ga
Domains aan rasmiga ahayn.
Farriimo leh cabsi/degdeg.
App/extension dalbanaya ogolaansho ballaaran.
DM ku weydiisanaya koodh.

5) Haddii lagaa xiray
Adeegso habka rasmiga ah ee soo-celinta (Facebook/Instagram/X/WhatsApp/Telegram).
Marka hore amniga email-ka hagaaji (2FA + beddel password).
La socodsii bulshada (website/warbaahin kale).
Kaydi caddeymaha.

6) Ka dib soo-celin
Beddel password + daar 2FA.
Ka saar apps/tokens aan la aqoon.
Dib u eeg maamulayaasha/doors.
Ku dhawaaq qoraal kooban oo wargelin ah.

7) Playbook kooxeed
Hal qof security focal haya backup codes.
Dib-u-eegis saddex-biloodle: doorar, sessions, tokens.
Farriimo diyaar oo lagu shaaciyo haddii dhibaato timaado.

8) Wacyigelin
DM Tip: “Marna ha dirin koodhka 6-da lambar—walaal/saaxiib xitaa.”
Banner: “Hubi domain-ka kahor login.”