Use a long, unique password.Switch on the emailed sign-in code.Never share your password, API key or SMS token. Our team will never ask for them.Limit API access to your own server IP addresses.