Why You Should Never Give Someone Your Verification Code

Step by Step

1. Use the official settings or website for the account, device, browser, or service involved.
2. A legitimate verification code is usually intended only for you to enter into the service that generated it; do not read or forward it to an unsolicited caller or texter.
3. Review security and recovery settings after making the change.
4. Keep recovery information and backups somewhere you can access if the primary device is lost.

If That Doesn't Work

• Never give an unsolicited caller or message sender your password, recovery code, or one-time verification code.
• If money or a critical account is at risk, use a known official contact method rather than contact information supplied in the suspicious message.