Before entering a password
Check the destination domain and use the operator’s own recovery flow if you cannot sign in. Avoid entering credentials into a copied login form or sharing a one-time code with an unverified helper. This guide does not collect credentials or access player accounts.