A system determines a value of an online account, and uses that value to identify a security-related mechanism for the account. The system determines the account value by taking as input various quantified characteristics of the account. The system weights each characteristic according to various criteria. The system may then use the weighted signals as inputs of an algorithm to calculate the account value for the account, and it may determine a security-related action that corresponds to the account value.