Staying safe: phishing and account-safety tips

A few habits keep your account safe:

• Use a strong, unique password (at least 8 characters; longer and mixed is better) that you don't reuse on other sites. Change it in Settings → Security.
• We will never ask for your password. No genuine staff member or email will ask you to reveal your current password. If someone does, it's a scam — refuse and report it.
• Check links before you click. Only log in on the real site, and make sure the address bar shows the correct domain and a padlock (HTTPS). Type the address yourself rather than following links in unexpected emails or messages.
• Beware of urgency and 'account verification' scares. Phishing messages try to rush you into entering your login or handing over codes/documents. Slow down and verify through official channels.
• Log out on shared devices and lock your own devices.
• If in doubt, contact support using the official contact page rather than replying to a suspicious message.