Securing your digital assets is an important responsibility that needs to be performed immediately after obtaining your account wallet for your cryptocurrencies. While we are building infrastructure, your awareness of security protection is also required to prevent potential security risks. Please take the necessary protective measures below to ensure the security of your personal information and accounts:
- Use a secure and unique Email address to register
Using a secure and unique Email address to register in Coinlocally will greatly reduce the risk of Credential Stuffing Attack caused by the leakage of email information from other websites.
- Secure your account with a strong password
A strong password should consist of at least 8 characters (the more characters, the stronger the password) that are a combination of letters, special characters and numbers and change it regularly.
- Enable 2-Factor Authentication for your account
The most commonly used 2FA algorithm is TOTP, a Time-based One-Time Password, which computes a one-time password from a shared secret key and the current time. Please be sure to enable 2FA to add extra protection to your account and keep the mnemonic and private key properly.
- Do not reveal your account details such as your email address and other information
Keep all your account-related information only to yourself and do not share it with anyone else. Coinlocally will NEVER ask for passwords, verification codes, or other confidential account-related information.
- Consider adding a login password, security lock or Face ID
Enable password or biometric verification for your devices to avoid information leakage caused by device loss
- Remember to log out of your account
when you’re going to be away from your computer for an extended period of time.
- Some Advices
- Improve your safety awareness and upgrade the protection measures of your devices
- Install a reputable anti-virus system
- Do not use the auto-fill function or save passwords on your browser
- Do not use Coinlocally on an unsecured public Wi-Fi connection
- Do not click unknown links or download suspicious Email attachments
- You can regularly check your account activity, i.e., the login time and IP address
- If you have activated the API service, please keep your API private key separately and only to yourself