Code requests
Do not give a one-time code to someone claiming to provide support; it is an authentication secret.
Layers of access protection
Use a long, unique password. A leak at one service can affect other accounts sharing the same password. Protect a password manager with a strong master password as well.
Access to email and phone can be as important as the account itself. Where the genuine service offers additional verification, understand its instructions before enabling it. This page does not guarantee such a feature at a particular service.
Unexpected password notices, unfamiliar devices and changed contact details are warning signs. Open the correct address independently rather than following the message link. Refreshing a browser is not a sufficient response to a security issue.
If something looks suspicious
Use a trusted device
Avoid an unfamiliar or possibly compromised device.
Protect contact access
Check control of the associated email and phone.
Use genuine channels
Follow the service’s real security or recovery process and retain relevant records.
Requests to stop
Be particularly cautious when urgency, secrecy and unexpected payment demands appear together.
Remote control
Do not let an unfamiliar person control your screen or install software.
Payment for recovery
Requests to pay a personal account to unlock access are suspicious; verify independently.
Priorities after exposure
If you enter a password on a false page, inspect other accounts using it. Change to unique passwords from a trusted device. Where session management exists, end unfamiliar sessions.
Retain times, messages and addresses, but redact secrets in screenshots. Use recovery guidance if access is lost, and contact the relevant financial provider about unauthorised financial activity.
Questions and practical answers
When should I change a password?
Change it promptly after suspected exposure; uniqueness and length matter.
What if someone asks for a code?
Do not share it. Verify the request by opening the genuine service independently.
Is every issue a hack?
No. Session expiry can be normal; unexplained changes are a separate warning sign.
Where should I go after losing access?
Use the cause-based steps on the account recovery page.