If you receive a "New Device Login" email from Privacy and you do recognize the location listed, no worries! Just enter the one-time password listed in the email and you'll back to paying with Privacy.
If you receive a "New Device Login" email from Privacy and you don't recognize the location listed, we recommend taking the following steps to secure your account:
Change your password. Good password health is important! It should be some combination of at least six letters, numbers, and punctuation (!, ?, and others). It's tempting to use the same password with multiple sites for easy memory, but this can be risky. To help keep your password safe and secure, you can also use a password manager such as LastPass or 1Password.
To change your password, visit https://privacy.com/reset-password on your device
- Enable Two-Factor Authentication (2FA). 2FA requires an additional form of verification in order to access your Privacy Account. You'll need to have a two-factor authentication app that supports TOTP (Google Authenticator, 1Password, or Authy are a few recommended options).
- To enable 2FA, log in to your Privacy Account and visit https://privacy.com/account
- Secure your email account. Anyone who has access to your email account may also be able to access your Privacy Account. Change your email password regularly and enable 2FA on that account as well if it's available.
- For more info on how to do this, please contact your email provider's support team.
I've followed these steps and my account is secure. But how did someone else get my password?
Passwords can be obtained in multiple ways. Here are a few common examples:
- Password reuse. If you used the same passwords on multiple sites, someone could have obtained the password you use for Privacy from another account or service that stores them improperly.
- Phishing. This type of attack occurs when someone (typically through email, or by using a fake site that looks similar to sites you already use) tries to trick you into sharing your personal information online. Privacy will never ask for your password through email. If you're unsure if an email you receive is really from Privacy, please contact us directly and we'll confirm.
- Malware. This type of attack is a program that logs the passwords you type into your browser as you input them. Check your browser regularly for suspicious add-ons or plugins and make sure both your browser and operating system are updated to the latest version.
If you have further questions or are concerned about the security of your account, write to us at firstname.lastname@example.org