Securing accounts

1. Find the trusted email: on mobile, log out, tap "Forgot password", enter the username and choose "Need more help". The email hints that appear are the trusted ones. Get access to all of them. If the creation email doesn't show up, the shown email is now the valuable one.
2. The seller removes all 2FA before you log in.
3. Secure the email that came with the account.
4. New devices can't add 2FA or change the email for about 5–7 days, so the seller changes the email and phone to yours.
5. Remove unfamiliar sessions under Security checks.
6. Request a data download ("Login and account creation") to see the original email.

1. Secure the email provided, or have the seller change it to a fresh one. New logins can't change it for 48 hours.
2. Change the password.
3. Remove the phone number. New logins can't change it for 48 hours, but you can add one later.
4. Clear all sessions and revoke app permissions.
5. Turn on Password Reset Protection and 2FA.

Don't change the birthday (it can lock the account) or the username (bots grab released names). Handles under 5 letters can't be swapped. Confirm the original email by comparing the account's creation date with the first email.

1. Work on mobile. On the login page, choose "recover your account" and enter the username. If it offers anything other than email or phone (for example Google), it's linked to an outside login and open to pullbacks.
2. Search the username. If two copies show up side by side, it's a duplicate, so walk away.
3. The seller changes the email or number to yours (Settings and privacy → Account). Adding a number improves security.
4. Reset the password from your email.
5. Under Security → Manage devices, remove every device. TikTok doesn't always log others out after a password change.
6. Turn on 2-step verification.

Passkeys: a passkey logs in with biometrics or a PIN, with no password. A seller can leave one on the account and pull it back later. Enabling your own passkey cancels the old one, but that can take days on a new login. Check for an active passkey before paying.

1. Only the owner can remove the linked number and 2FA. They do it by moving the number to another Snapchat account.
2. Have your email added.
3. A normal password change has a 24–48 hour wait, so reset through "forgot password" by email.
4. Download the account data. It shows previous emails and numbers.

1. Secure the associated email, then change it to yours.
2. The old email gets a 24-hour revert link. Make sure it's permanently deleted, because it can pull the account back instantly.
3. Change the password and turn on 2FA.

Get the date of birth, which support may ask for. Usernames can't be swapped.

1. The seller changes the phone number to yours. A new login can't do this for 24 hours.
2. The seller logs out every other session (Settings → Devices, or Privacy and Security → Sessions on desktop).
3. Turn on a 2FA password.
4. Disconnect active websites, and tighten privacy settings such as last seen, forwards and who can add you to groups.

Account to account: 2FA must have been on for 7 days. The seller renames their account (for example @name → @name123), creates a public channel with the original @, adds the buyer as admin with all permissions, and transfers channel ownership (confirmed with the 2FA password).

Channel to account: rename the channel's link, then set the account username to the freed @. Account to channel: the reverse.

NFT usernames: these are held as NFTs on TON. Create a Tonkeeper wallet (write down the 24-word seed phrase), send your TON address to the seller, connect the wallet and your Telegram to Fragment, then assign the username to your account or channel and activate it in Telegram's settings.

Claim a released name within 15 minutes or it can be lost. Don't swap more than twice an hour.

1. Secure the email (or OGE), or change it to yours using the seller's verification code.
2. Change the password.
3. Change the phone number rather than removing it, because removal can trigger locks. Avoid VoIP numbers.
4. Turn on 2FA, remove authorized apps, and log out all devices.

Badged or aged Discord accounts carry extra risk. A previous owner who knows the security answers can reclaim the account through support at any time, and Discord won't notify you. Buy only from owners with a clean history.

1. Check that the creation date and registration email match. That usually means you have the original email.
2. Change the password in Account Details. Keeping the original email is often safer.
3. Set up Steam Guard Mobile and deauthorize all other devices.
4. Keep records of purchases and keys for future support claims, and check for community locks or bans.

1. Note the date of birth first, because changes can trigger a lock that asks for it.
2. Change the email (keep a record of the old one), then the password.
3. Leave any Family Management group.
4. Deactivate connected consoles under Device Management.

1. Microsoft account → Security Dashboard → Advanced security options: change the password, turn off alerts to the old contact, and add your own verification methods.
2. Turn on 2FA and generate a recovery code. Store it safely.
3. Add your own email alias, make it primary, then use "Sign me out" to log out every device.
4. Remove unknown devices and payment methods, and review sign-in activity.

Check for duplicate gamertags: set the default picture and message another account to confirm it's the real tag.

1. Before you log in, the seller unlinks Xbox, PSN, Nintendo and connected apps.
2. Don't change the email straight away, because a sudden change can disable the account.
3. Secure the current email.
4. Change the password, turn on 2FA and sign out everywhere.
5. Later, download the account information PDF for your records.

1. Sign in to Outlook and the Microsoft account. You'll need codes from the seller.
2. Remove linked devices.
3. Add your own security methods and authenticator, then remove the seller's.
4. Generate a new recovery code and sign out of all devices.
5. Change the password.
6. Add a new primary email alias and remove the old ones.
7. Check the account for known exploits, and confirm the in-game name, capes, and any server ranks or bans.

1. Secure the email, then change it to yours.
2. Change the password.
3. Change or remove the phone number.

1. Log in with the code sent to the email on file (ask the seller if you don't have that email).
2. Change the email using the verification link sent to your new address.
3. Change the password and turn on 2FA.