Use a strong password, verify your email, and never share OTP codes. Report suspicious activity to support.