| Practice | Reason | |----------|--------| | Never share passwords | Prevents unauthorized tender access. | | Use unique, strong password | Reduces breach risk across other services. | | Enable MFA if supported | Adds critical layer against credential theft. | | Logout after sessions | Especially on shared or public computers. | | Verify portal URL | Phishing sites mimic login pages; check for HTTPS and correct domain. |