The essentials
- •Two-factor (2FA / TOTP) — add an authenticator code on top of your password. It is the single biggest upgrade to your account safety; turn it on first.
- •Sessions — review your active sessions and revoke any you don’t recognize, so a forgotten device can’t linger.
- •Account linking & merge — you can sign in more than one way; linking keeps them one account. Duplicates can happen by design, and a merge absorbs an empty stub into your real account. A non-empty merge is handled manually and carefully — money is never silently moved.
- •Your data (GDPR) — export or delete your data on request.
- •Avatar — your photo lives on your profile, not baked into your login token.
Why it matters here
TalixTrade already limits what a leaked exchange key can do — API keys are read + trade only, never withdrawal, so funds can’t leave the exchange. But your account access is the other half of the picture, and that half is yours to guard.
The pitfall
Skipping 2FA “for now.” A password alone is the weakest link in the chain. Enable 2FA, review sessions periodically, and never share credentials — the strongest exchange-key hygiene in the world doesn’t help if someone walks into your account through an unprotected login.
Next
For scripts, prefer scoped keys in the Public API over your password; keep security alerts on in Notifications.