Use a unique password
Use a password manager to create a long, unique password that you do not reuse on email, social, exchange, or wallet accounts.
Enable two-factor authentication
Where available, enable 2FA before depositing assets. Protect the email account connected to the exchange with strong 2FA as well.
Set anti-phishing controls
If the official platform offers an anti-phishing code, configure it so official emails are easier to recognize.
Be careful with support messages
Treat unsolicited support messages, recovery offers, urgent account warnings, and private-message helpers with suspicion. Support should happen through official channels.
Protect withdrawal actions
Review withdrawal address controls, device management, login history, and notification settings on the official platform before moving significant funds.