Finding out that one of your accounts was hacked can make you question when you will finally stop looking at everything. A week? A month? For good?

The First Weeks Count the Most

The first few days need the most focus. Look at your bank and credit card accounts. Also check your email for password reset messages that you did not ask for.

And don’t skip over tiny changes. A login notification from a place you have never been to is something to look into. So is a new device showing up in your account settings.

Your 90-Day Watch

After the week you do not have to look at your accounts every single morning. That becomes much too fast. Instead look at them at once a week for about three months.

• Weekly checks are enough for people after the first few weeks but I would leave alerts on because they do the hard work for you.

• Password changes are the priority if the hacked account used a password that you also used somewhere else. One old password can give access to places than you think.

• Credit activity needs attention if personal details were shared especially if the breach included information that does not change when you reset a password.

Why Three Months Is Not a Special Date

Ninety days is a point to check, not a time when security ends. Some stolen details get used fast. Other details stay around until someone tries them later which is why financial or identity-related breaches need a longer look.

If Your Identity Was Shared

If the breach included identity information keep watching for a year. Check your credit reports from time to time. Watch for anything that seems strange.

Because once someone has information that cannot be changed easily the issue can last longer than the original breach notice says.

Make Watching Boring

• Bank alerts should be on and not hidden somewhere you never check.

• A monthly calendar reminder is good enough for checks. It feels too simple, which is why people actually do it.

When You Can Relax

If three months go by with no activity and the breach only involved a low risk account you can usually stop watching it so closely. Keep alerts on though.

For financial or identity breaches I would keep an eye on things for a year. After that go back, to your account habits unless something new happens.