- Use a long, unique password that is not reused on another service.
- Never share passwords, reset links or verification codes.
- Confirm the website address before signing in.
- Sign out after using a shared or public computer.
- Download confidential documents only to approved devices.
- Report unexpected password resets, unfamiliar activity or suspicious messages promptly.
An administrator may reset an account password but should never ask for the former password.