Security Best Practices

Your sign-in

• Use a long, unique password that you do not use anywhere else, or sign in with Google or Apple.
• Turn on two-factor authentication with your email, Google, or Apple account.
• Consider a password manager so you do not have to remember them.
• Change your password if you suspect it has been exposed anywhere.

Recognising a fake message

• We will never ask for your password, by email, chat, or phone.
• Check the sender address carefully, and be wary of urgency or threats.
• Rather than clicking a link in a message, open the site yourself and sign in there.
• Do not open attachments sent by someone you met online.

Your devices

• Keep your operating system and browser updated.
• Lock your devices with a passcode, fingerprint, or face unlock.
• Sign out on shared or public computers.
• Avoid entering credentials over public Wi-Fi you do not trust.

If you think your account is compromised

1. 1Reset your password, or your email or provider password if that is where the problem started.
2. 2Review your profile for changes you did not make.
3. 3Contact us so we can look at the account.

Safety Center→