What is two-factor authentication?
Two-factor authentication (2FA) adds extra security to your account. After entering password, you verify with: Google Authenticator app code OR Email OTP. Enable in Settings → Security → Two-Factor Authentication.
How do I enable Google Authenticator?
Settings → Security → Two-Factor Authentication → Select Google Authenticator → Scan QR code with app (Google Authenticator or Authy) → Enter 6-digit code → Save backup codes safely. Login now requires app code!
How does email OTP work?
When you login, we send 6-digit code to your registered email. Enter code within 10 minutes. Code expires after use. Enable: Settings → Security → Email OTP. More convenient than authenticator app!
How can I keep my account secure?
Best practices: Use strong unique password (12+ characters), Enable 2FA, Never share password, Logout on shared devices, Review login history regularly, Update email address, Beware of phishing emails, Use secure internet connection.
How do login sessions work?
Each login creates secure session. View active sessions: Settings → Security → Active Sessions. See: Device, Location, IP address, Login time. Logout remotely from suspicious devices. Sessions expire after 30 days inactivity.
What if I see suspicious activity?
Immediately: Change password, Enable 2FA, Logout all sessions, Check order history, Review account changes. Contact support if unauthorized purchases. We monitor for fraud and send security alerts for unusual activity.
What are password requirements?
Strong password must have: Minimum 8 characters (12+ recommended), Mix of uppercase and lowercase, At least one number, At least one special character (!@#$%), No common words or personal info. Password strength meter helps you!
How is my data protected?
Your data is protected by: 256-bit SSL encryption, Secure database encryption, Regular security audits, GDPR compliance, Limited staff access, No data selling. View Privacy Policy for full details.
How do I avoid phishing scams?
Watch for: Suspicious emails asking for password, Fake websites (check URL carefully), Urgent payment requests, Grammar mistakes, Unknown sender addresses. We NEVER ask for password via email. Always login directly to payorget.com.
How do I recover a locked account?
Account locked after 5 failed login attempts (security measure). Wait 30 minutes OR reset password immediately. For help: Contact support with registered email and ID proof. We verify identity before unlocking.