Account security

Start with a unique password

Use a long password you do not use elsewhere. A password manager can create and store one. Nabtap support will never ask for your password or an authentication code in a message.

Turn on two-factor authentication

An authenticator app adds a second check when someone signs in. Store recovery codes somewhere separate from the device you use for Nabtap.

Review active sessions

Account security shows signed-in devices and recent login activity. Sign out sessions you do not recognize and change your password immediately if anything looks unfamiliar.

Recognize phishing

• Check the full website address before signing in.
• Do not open account-warning links from unknown senders.
• Never share one-time codes, recovery codes or a QR setup secret.
• Treat urgent promises of verification, sponsorship or restored access as suspicious.

If you lose access

Use the recovery flow from the official Nabtap app or website. Provide accurate account information; additional identity verification may be required to prevent takeover.