Stockity account security checklist

Use a unique password. Reusing a password from another site means one breach elsewhere can expose your trading account too. A password manager makes this painless.

Turn on two-factor authentication (2FA) if it's available. This single step blocks most account-takeover attempts, even if your password ever leaks.

Double-check the URL before every login, not just the first time. Browser extensions and malware can silently redirect you — a habit of glancing at the address bar catches this.

Never share a one-time code (OTP) with anyone, including someone claiming to be support staff. Legitimate support will never ask you to read a code back to them.

Log out of shared or public devices after every session, and avoid saving your password in a browser on a computer you don't fully control.

Review login activity periodically if your platform offers it, and report anything unfamiliar through official support channels immediately.