Ten habits that protect you
- Use a long, unique password. Twelve characters or more, never reused.
- Use a password manager or write passwords in a notebook kept at home.
- Turn on extra verification wherever it is offered.
- Never share one-time codes. Not with friends, and not with support.
- Bookmark the verified website. Do not reach it through search or adverts.
- Install apps only from verified sources and review permissions.
- Keep your phone updated and lock it with a PIN or biometrics.
- Avoid public Wi-Fi for logins and payments.
- Log out on shared devices and never save passwords on them.
- Check your account history from time to time for activity you do not recognise.
How phishing works
A phishing message copies a real brand and asks you to click a link to fix a problem, claim a reward or verify an account. The link leads to a fake page that records what you type. Before you click, read the address, and if in doubt open the app or your bookmark directly.
If you suspect a problem
- Change your password right away, from a device you trust.
- Log out of other devices if the app allows it.
- Check recent transactions and report anything unfamiliar to support.
- Change the password on any other service where you reused it.
- Scan your phone with a reputable security tool.
Start safe from the beginning with the registration guide.
Frequently asked questions
Is a long password really better than a complex one?
Yes. Length matters most, and a short phrase of unrelated words is easy to remember.
Should I save my password in the browser?
Only on a device you alone use and lock. A dedicated password manager is safer.
What is the biggest risk?
Sharing a one-time code or entering details on a fake page.
