Beginner
Account Security Basics
Protect an account with unique credentials, multi-factor authentication, verified domains, session controls, and incident response.
Use unique credentials
Create a long unique password and store it in a reputable password manager. Reusing a password lets a breach elsewhere expose this account through credential stuffing. Never share a password or one-time code with support.
Add a second factor
Enable multi-factor authentication where available, preferring an authenticator or security key when supported. Save recovery codes securely and confirm that account recovery cannot be redirected to an outdated email or phone.
Verify every entry point
Type or bookmark the official domain, inspect app-store publisher identity, and be cautious with sponsored results, messages, QR codes, and urgent support claims. A padlock shows connection encryption, not that a site is legitimate.
Control sessions and alerts
Review active sessions, sign out old devices, enable login and transaction alerts, and protect the linked email account. Avoid sensitive activity on shared devices or untrusted networks.
Respond to an incident
If compromise is suspected, stop transactions, change credentials from a trusted device, revoke sessions, secure the linked email, contact official support, and document unauthorized activity. Report payment issues through the appropriate provider.
Frequently Asked Questions
Can support ask for my one-time code?
Legitimate support should not need your authentication code or password.
Is SMS authentication enough?
It is better than no second factor, though authenticator apps or security keys can offer stronger protection.
Does HTTPS prove a site is genuine?
No. It secures the connection but a fraudulent site can also use HTTPS.
What is credential stuffing?
Attackers test passwords leaked from other services against your account.
What should I secure first after compromise?
Secure the linked email and platform credentials, revoke sessions, then contact official support and payment providers.