Keeping your account safe

Use a strong password you don't use anywhere else, turn on two-step sign-in, and check which devices are signed in from time to time. Everything below is in Settings → Security and Settings → Account.

Your security checklist

1. Use a strong, unique password. At least 8 characters; longer is better. Don't reuse a password from another site. Change it in Settings → Account. Changing it signs you out on your other devices. See How do I change my password?.
2. Turn on two-step sign-in. In Settings → Security, select Set it up under Two-step sign-in. After your password, you'll enter a code from an authenticator app like Google Authenticator, Authy or 1Password. Download your backup codes and keep them somewhere safe. See How do I set up two-step sign-in?.
3. Check where you're signed in. Under Where you're signed in, sign out any device you don't recognize, or select Sign out all others. See How do I manage my devices?.
4. Keep your email current and secure. Your email is how you reset your password. When you change it, the new address has to confirm it, and your old address gets a notice. See How do I change my email?.
5. Review your ways to sign in. Under Ways to sign in in Settings → Account, disconnect any service you no longer use. Keep at least one way in.

Watch out for phishing

• offtheave staff will never ask for your password, two-step codes, backup codes or a wallet's recovery phrase, by message, email or anywhere else.
• Only enter your password on offtheave.com. If a link asks you to sign in, check the address first.
• Be careful with links in messages from people you don't know, especially offers of free plans, XP, promotion or "verification."
• Report accounts that pretend to be offtheave staff or another artist. See How do I report something?.

If you sign in with a Solana wallet, never share your recovery phrase with anyone. Anyone who has it controls your wallet.

Warning signs

• An email saying your offtheave email is being changed when you didn't ask for it.
• A device or place you don't recognize under Where you're signed in.
• Posts, messages or purchases you didn't make.

If you think someone got into your account

1. Change your password right away. If you can't sign in, reset it from Reset password.
2. In Settings → Security, select Sign out all others.
3. Turn on two-step sign-in if it isn't on already.
4. Check that the email on your account is still yours.
5. Tell us through the Contact page (choose Account & sign-in) with your username. Never include your password.

After too many wrong passwords, sign-in pauses for 15 minutes. That protects you from people guessing your password. Resetting your password is the fastest way back in.

Related

• I can't sign in
• How do I delete my account?