Personal accounts - security best practices

At Alchemy, your security is our top priority. To help protect your personal information and accounts, we recommend following these best practices:

Use strong, unique passwords

• Create a password that is long, random, and unique to every account.
• Avoid using the same password across multiple accounts.
• Consider using a reputable password manager to store and generate secure passwords.

Enable two-factor authentication (2FA)

• Always enable 2FA on your Alchemy account and any connected services.
• We recommend using an authenticator app (like Google Authenticator or Authy) instead of SMS for stronger protection.

Stay alert for phishing attempts

• Never click on suspicious links or open unexpected attachments.
• Alchemy will never ask for your password, 2FA code, or private keys via email, text, or phone call.
• Always double-check email sender addresses and website URLs.
• Alchemy employees and recruiters will never ask you to run command line prompts.

Secure your devices

• Keep your device's operating system, browsers, and apps updated to the latest versions.
• Use strong device passcodes and enable security features like Face ID or fingerprint authentication.

Use trusted networks

• Avoid accessing sensitive accounts over public Wi-Fi without a VPN (Virtual Private Network).
• Ensure your home and work networks are secured with strong passwords.

Monitor your accounts

• Regularly check your account activity for any unusual behavior.
• Set up account alerts where possible to be notified of changes or login attempts.

Backup your recovery information

• Store your recovery codes, backup keys, and other important security information offline and securely.
• Consider writing them down and storing them in a secure location like a safe.

Be careful with third-party apps

• Only integrate apps and services that you trust and verify.
• Review app permissions regularly and revoke access you no longer need.

Report suspicious activity immediately

• If you notice any suspicious activity or believe your account may have been compromised, contact Alchemy Support immediately.

Stay calm and think before acting

• If you receive a security alert, suspicious message, or think something is wrong, don’t panic.
• Take a moment to slow down and verify the situation through official channels.

Scammers often try to create a sense of urgency to rush your decisions — trust your instincts and proceed carefully.