The single biggest thing you can do to protect your accounts is turn on **two-factor authentication (2FA)** — a code from your phone on top of your password. Even if someone gets your password, they can't get in.

## 2FA on your phone system (Self Care Portal)

1. Log in to your Self Care Portal (same details as your Communicator app)
2. Go to **My Details**
3. Turn on **TOTP two-factor authentication**
4. Scan the QR code with an authenticator app — Microsoft Authenticator, Google Authenticator, 1Password or Authy all work
5. Enter the 6-digit code to confirm

From then on you'll enter a fresh code at login. Store the setup key in your password manager as a backup, so you can restore it if you change phones.

## 2FA on Microsoft 365

If Jabblefish manages your Microsoft 365, we can enforce 2FA across your whole team — strongly recommended, especially for anyone handling email, finance or admin. Ask us to switch it on.

## Everyday habits that matter

- **Use a password manager** so every account has a long, unique password — reused passwords are how one breach becomes many.
- **Be sceptical of urgent emails** asking you to log in, pay an invoice, or change bank details — check by phone using a number you already have, not one in the email.
- **Lock your screen** when you step away.
- **Tell us fast** if something looks off — a login alert you don't recognise, a strange email "from" a colleague. Ring 1300 522 253 for anything urgent; early beats perfect.

Worried an account may be compromised? Don't wait — call us on 1300 522 253 and we'll secure it straight away.