[2020] PSA: Best Practices for Account Security

Greetings Tenno,

At Digital Extremes, we take your account security very seriously, and the Corpus are very inventive in trying to get your account information.

As a best practice, you should be aware of the following:

• Digital Extremes will never send you an email from a public email domain (such as Gmail or Hotmail). If you receive an email claiming to be from Digital Extremes, make sure the sending address is either @warframe.com, @digitalextremes.com or @digitalextremes.zendesk.com (our Support site). Do not click on the links in false emails, as they can lead to bad software or password-stealing ‘spoof’ sites.
• If you are on PC, you should make sure that Two-Factor Authentication (2FA) is enabled. This is required for Trading, so be sure to protect your account! If you need more information on PC 2FA, you can read the instructions in this thread.
   
• If you are on Console, you should enable 2FA on your console account. Each console has a different process, and you can find that process over on this thread. Protecting your console account covers your games which automatically log in, Warframe included.

As a general rule, there are lots of good anti-virus programs out there (some of which are free), as well as some other best practices (such as using robust, unique passwords). While we cannot recommend individual programs or password managers, we highly suggest you research reputable programs and use them to protect yourself - not just in Warframe, but for your digital security as a whole.

Stay safe out there (physically and digitally), Tenno!
 

Edited 44 minutes ago by [DE]Bear
added @digitalextremes.zendesk.com for clarity of official email domains.

1 hour ago, Vit0Corleone said:

@[DE]Bear Worth mentioning that Warframe purchase receipts come from digitalriver[.]com and not those domain names ( at least that's where I get them from ).

Just saying, as they come branded with Warframe logo. Even thou it's not a big deal since they don't have any call to action ( e.g. no "click this now" link 😉 ).

This is very true. In most (if not all of these cases) the user is aware of the transaction with the payment partner (in this case Digital River) so it should not be too much of a surprise.

It always pays to double-check if you are unsure. Err on the side of caution.