How to protect password reset codes
PURPOSE
Password reset codes can be used to take over accounts if exposed.
KEEP THEM PRIVATE
Do not share reset codes by email, text, phone, or chat unless following an approved verified process.
WARNING SIGNS
Attackers may pretend to be support staff, coworkers, or vendors asking for verification codes.
BEST PRACTICE
Real support staff should not need your personal reset code.
IF EXPOSED
Change the password immediately and report the incident.