How Can I Make My Account More Secure?

GIFA Exchange supports strict sign-in protocols using two-factor authentications. Yes, you can secure your trading account, GIFA Exchange re...

GIFA Exchange supports strict sign-in protocols using two-factor authentications.

Yes, you can secure your trading account, GIFA Exchange requires all the users to set up multi-factor authentication on their accounts. 

GIFA Exchange takes extensive security measures to ensure your account and cryptocurrency investment remain as safe as possible, but ultimately, security is a shared responsibility that required you as an owner to take proactive measures in helping safeguard your investment and keep your account secure and safe from unauthorized access.

1) Use a Strong Password

Use a password that is long, random, and unique to your GIFA account. Never use the same password twice across your online accounts! You can request for password reset link if you suspect anything strange or just want a new password. We also recommend using a 15-character password with an upper case, numbers, and letters in combination to create a unique password for your GIFA Exchange accounts. 

For more password-related information or to see how to set up a strong password for your trading current, please contact the support team: support@gifatoken.com.  Never disclose your password to anyone not even to the staff members. GIFA Exchange team members will never ask for your password.

2) Utilize 2-Step Verification 

We strongly recommend using a security key to protect your GIFA Exchange account. You can read more on your won about why we consider security keys as the gold standard of account security. One Time Password (OTP) with a mobile authenticator app like Google Authenticator. By using OTP, you are drastically reducing your chances of your account being compromised.

The screenshot is taken from GIFA Exchange /GIFX.

Security keys and OTP can both be enabled in your account’s security settings. If you need help enabling these features, please review this support article outlining the necessary steps. To add an extra layer of security to your account, you should also consider enabling 2-step verification for all sends of cryptocurrency. This feature can also be enabled in your account’s security settings.

If you don’t own a smartphone and are restricted to receiving your 2-step verification codes via a text message, you should follow the steps in the section “Adding 2FA” on the account to reduce the likelihood that you will suffer a SIM swap or phone port attack. If you are using the GIFA Exchange / GIFA Wallet mobile app to access your account, we highly recommend enabling a security setup in the app’s security settings. You can enable these features for both accessing the app and sending funds with the app.

A SIM swap or phone port attack occurs when an attacker has their target’s phone number transferred to a mobile device under the attacker’s control. Fraudsters are able to do this through a variety of means, including identity theft and socially engineering mobile carrier customer support representatives. This type of attack is a threat to all accounts using SMS-based 2-step verification and any account that can be recovered using phone-based authentication. To help protect yourself against this type of attack, please complete the following:

1. Call your mobile service provider and tell them about port freezing.
2. Ask them for a valid photo ID verification, whenever making new changes.
3. Ask them to add or enable a PIN number when making changes to your account.
4. Inquire about other security measures you can enable on your mobile account.

Even if you don't use SMS-based 2-step verification, you should still protect your mobile device by enabling a screen lock. This will help prevent a thief from accessing your GIFA Exchange account and email if your phone is ever stolen.

3) Secure Your Email

Your email is one of the most important connections between you and your GIFA Exchange account. We use your email to confirm new devices, send you important alerts about your account, and communicate with you if you need support. Please make sure it is always secure!

Always, check constantly whether or not your email address has ever been compromised. If so, we recommend changing any passwords associated with that email address. You should also enable 2-step verification on your personal email account as well. As an additional security precaution, you should conduct a periodic security review of your email account and settings as well:

1. Check your email account for unusual rules, filters, or forwarding addresses.
2. Check your email account settings for authorized devices you do not recognize.
3. Check for unauthorized recovery emails or phone numbers added to the account.

For those who feel like they may be at risk of targeted account takeover attempts, check out Google’s Advanced Protection Program.

4) Keep Your Devices Updated

While there are many types of malware that can infect a device, a few in particular can be especially worrisome. Keyloggers, remote access trojans (RATs), and cookie-stealing malware can all be used to steal your sign-in credentials and gain unauthorized access to your accounts. To protect your devices from these types of threats, consider the following:

• Utilize anti-virus protection and scan your device regularly. You should also be updating your virus signatures as often as possible to stay ahead of new threats.
• Keep your device updated with all of the most recent operating system and security updates.
• Keep your web browser and all other software updated with their latest versions.
• Uninstall all questionable or unnecessary pieces of software from your device, especially tools that allow remote access.
• Install an ad blocker like uBlock Origin in your browser to help protect you from malicious ads.
• Practice safe web browsing habits and never click on suspicious links or download suspicious programs.
• Do not install and use browser plug-ins or add-ons developed by unknown third parties.
• Enable a screen lock and password to gain access to your device.

5) Bookmark GIFA Token

Bookmark https://gifatoken.com in your browser and only use this link to access GIFA Token. If you ever receive any text messages or emails about your GIFA Exchange account, always use the bookmark to navigate to your account. If you receive a message appearing to have been sent by GIFA Exchange, and you believe it is suspicious, you can always forward it to info@gifatoken.com to verify its authenticity.

6) Check Your History Activity

In your GIFA Exchange account, visit the Activity page where you can view all of your active sessions Order History, Trade History, and Account History including authorized mobile applications, web sessions, and confirmed devices. 

This is a screenshot of the History Activity from www.gifatoken.com.

If at any time you notice an unauthorized application, session, or device, you can revoke access by submitting an account review. If you need to revoke an unauthorized login to your account that you don't recognize, you should change your GIFA Exchange and email passwords immediately. You can also open a customer support ticket explaining the issue so our security team can review your account and help you secure it.

7) Practice Due Diligence

Always practice due diligence when installing software or applications on the device that you use to access your GIFA Exchange account. Additionally, you should do your research when allowing any third-party applications to access your account. Avoid installing software from unknown or otherwise shady sources. This includes “free” or cracked versions of commercial software. Browser plugins can also be risky to install, make sure you always install browser plugins from the official browser plugin repository for your browser.

This is a screenshot of the History Activity from www.gifatoken.com.

If you allow any third-party applications access to your GIFA Exchange account, you can always manage or revoke its access on your Activity page. On another note, it is common practice for scammers to impersonate GIFA Token and website. Before engaging with anyone claiming to be GIFA Token on the net or on social media, please check to see if it is really an official website. If not, please send the link to the impersonation account to info@gifatoken.com immediately.

8) Contact Customer Support

If at any time you have an account security concern or question, please do not hesitate to contact GIFA Token support. Only contact GIFA Exchange via official email addresses. Fake customer support numbers and websites are a constant threat—please be very cautious with any information you find via forums, social media, and the internet. As a rule of thumb, remember that GIFA Exchange staff will never:

• Ask for your password, 2-step verification codes, or email access.
• Ask you to install remote sign-in or remote support software on your computer.
• Ask you to send money for resolving issues with your account.
• Call you directly to handle account support or troubleshoot other issues.

If anyone claiming to be associated with the GIFA Token support team requests this information or calls you directly, please cease all communication and immediately contact us. We hope that this information helps you take your account security to the next level.