I received an unrecognized device verification request

If you receive a verification email from OshinStar and do not recognize the location, follow these tips below to keep your account secure.

Change your password

If someone other than you has triggered a device verification request, it means that someone has successfully entered your login credentials.

If you have an email login and password, you will want to change your password as soon as possible to prevent future login attempts from unknown parties.

Making a strong password

• Use a combination of at least eight numbers, letters and/or punctuation marks.

• It should be different from other passwords you use elsewhere on the Internet.

• Change your password regularly.

If you are unable to log in to your locked account due to the security fee limitation, you can change it using the forgot password form.

How did someone get your password?

OshinStar does not store passwords; we keep the BCyrpt hash of a password and check that the password you log in with matches it.

The most common method of accessing your password is through one of these 3 methods:

• Password reuse: someone accessed your password for another service that does not store it correctly.

• Phishing: a phishing attack occurs when someone tries to trick you into sharing personal information online. Phishing is typically done through email, advertisements or on imposter websites that look similar to the ones you already use. For example, you may receive an email that looks like it is from your bank asking you to confirm your bank account number.

• Malware: although this is rarer, it can happen that malware records the passwords you are typing into your browser. Check your browser for suspicious plug-ins or add-ons and make sure your browser and operating system are up to date.

Tips for keeping your account safe

• Never give your password to someone you don't know or publish it in an e-mail. Enable two-factor authentication login.

• This feature allows you to bypass device verification and authenticate all login attempts directly from your mobile device. Here are our steps for setting up two-factor authentication login.

• Make sure your email account is secure. Change your password often and use unique passwords. It is likely that anyone who can read your email will also be able to access your OshinStar account.