How to protect your creator accounts before something goes wrong

Start with your recovery email

Make a private list of the accounts you use and the email address or phone number each depends on. Check that you still control them and that none relies on an old address you cannot access. Do not put passwords in that same list if you will share it with anyone.

Use unique passwords and a trusted password manager. Your email account deserves as much attention as your public profile: someone who accesses it may try to reset other accounts. Keep the device you work on updated and protected too.

Strengthen access and prepare recovery

1. Open security in the official app

   Go directly to each platform's settings, not through a message threatening to close your account.

2. Enable a second factor

   Set up two-step verification using the available methods. Consider a passkey where supported and understand how its recovery works.

3. Store recovery information

   If backup codes are offered, keep them somewhere secure outside the only phone you might lose. Do not send them through chat.

4. Review sessions and permissions

   Check connected devices and authorized apps. Remove access you no longer need through each platform's process.

A partnership does not need your password

Be cautious about requests to install a supposed contract viewer, run an executable or hand over a sign-in code to receive payment or verify your channel. A familiar logo and convincing signature do not prove who sent an email.

Verify the sender through an independent channel. If an agency or editor needs to work with you, ask about official permissions and limit access to the work required. Do not hand over a browser session, backup codes or control of your recovery email.

When you see activity you do not recognize

Use a trusted device to open the official app or website and follow its security or recovery process. Review your email, sign-in methods and sessions. If you suspect you installed malicious software, address that risk before continuing to change passwords on the same device.

Save the notices and record when you discovered the problem. Do not pay strangers who promise account recovery through private messages. After regaining control, review posts, messages and permissions that may have changed.

• Current recovery email and phone number.
• Second factor enabled and recovery information stored safely.
• Access limited to necessary people and apps.
• No passwords or sign-in codes shared for partnerships.