How do I keep my account secure?

Turn on two-factor authentication, sign in with a password you use nowhere else, and never share a code, a recovery code or a claim link with anyone. Those three habits make it very hard for anyone else to get into your account, even someone who learns your sign-in details.

These habits protect your account the most, with the most important first:

• Turn on two-factor authentication on your security page by setting up an authenticator app, so every sign-in also needs a code from your phone.
• Use a password you use nowhere else, on Earnit.GG and on any social account you sign in with, so a leak on another site cannot open your account.
• Save your recovery codes somewhere safe, away from your phone, so you can sign in if you lose access to your authenticator app.
• Look at Sessions on your security page from time to time, and press Disconnect beside any device you do not recognize.
• Keep your email inbox safe, because that is where a password reset link goes.

What does two-factor authentication protect?

Two-factor authentication adds a 6-digit code from an authenticator app to your sign-in, so stolen sign-in details alone are not enough to get into your account. The code from your authenticator app is also needed before anyone can withdraw your balance, save, change or delete a payout address, or reveal a claim link or gift card code. It is needed too before anyone can change your password or the email on your account, delete your account, turn two-factor authentication off or get new recovery codes.

What makes a strong password for Earnit.GG?

A strong password is long, and it is one you do not use anywhere else. Every Earnit.GG password needs 8 to 100 characters, with an upper case letter, a lower case letter and a digit. A password made of a few unrelated words, with a capital letter and a digit, is stronger than a short password full of symbols. A password manager can create a strong password and remember it for you.

If you signed up with a social account such as Google or Steam, your Earnit.GG account has no password of its own. Protect that social account with a strong password and its own two-factor authentication instead.

What should I never share with anyone?

• Your password, even with someone who says they work for Earnit.GG, because our staff never ask for it.
• A code from your authenticator app, or a code we email you.
• Your recovery codes, because each one signs in to your account.
• A claim link or a gift card code from your withdrawals page, because anyone who has one can spend it.

We never ask you to send us any of these, so a message that asks for one is not from us.