Secure your government accounts

Use unique passwords, MFA, and sign-in alerts. Review trusted devices and revoke old sessions after travel or device sale.

Recovery

Backup codes and secondary emails prevent lockouts; store codes offline.

Scams

Verify URLs; phishing sites mimic GCKey and banking partners.

Security

Defence flyout “Secure your account”.