A guide to protecting your digital assets and understanding secure access.
Verifying the Official Login Portal
The single most important step in securing your account is ensuring you are visiting the official Uphold website. Always double-check the URL in your browser's address bar. The correct, secure address will begin with https:// and match the official Uphold domain exactly. Never log in from links provided in emails or third-party websites unless you have verified the destination beforehand.
Security Checklist: Before entering your credentials, look for the padlock icon next to the URL and confirm the domain name is legitimate. Phishing sites often use slight misspellings or different domains.
Mandatory Two-Factor Authentication (2FA)
Uphold strongly encourages, and often requires, the use of Two-Factor Authentication (2FA) for all users. This process adds an essential layer of protection by requiring a rotating security code from a separate device, such as your phone, in addition to your password.
Use an authenticator app (like Google Authenticator or Authy) rather than SMS-based 2FA, as app-based methods are significantly more secure.
Ensure you back up your 2FA recovery keys in a safe, offline location. Losing access to your 2FA device without these keys can lead to significant account access delays.
Creating and Managing Strong Passwords
Your password is the first line of defense. A strong password should be unique, complex, and never reused across multiple services.
Aim for a minimum of 12 characters, mixing uppercase and lowercase letters, numbers, and symbols.
Do not use personal information (names, birthdays, pets) that can be easily guessed.
Consider using a reputable password manager to securely generate and store your credentials.
Change your password immediately if you suspect it has been compromised or if you receive a security alert.
How to Spot and Avoid Phishing Scams
Phishing attacks are attempts to trick you into providing your login details. They often come in the form of urgent emails or text messages claiming an issue with your account.
Watch out for these red flags:
Requests for your private keys, seed phrases, or full passwords via email. Uphold will never ask for these.
Threats to immediately suspend your account unless you click a link and log in.
Poor grammar, mismatched sender email addresses, or unusual logos/branding.
Links that direct you to a domain other than the official Uphold website.