Your online account is where you manage everything, so keeping the login to it secure matters. None of this is complicated — it is a handful of habits that make a real difference.
The basics that matter most
- Use a strong, unique password. Not one you use anywhere else. A few random words together are easy to remember and hard to guess.
- Turn on extra login security if it is offered. Where the portal offers a second step at sign-in, switch it on — it means a password alone is not enough to get in.
- Keep your email secure too. Whoever controls your email can often reset other logins, so protect it just as carefully.
- Sign out on shared devices and avoid saving the password in a browser someone else uses.
A one-time security code is for you to enter, never to read out. We will never phone or message you to ask for a code, your password or your PIN. Anyone who does is trying to take over your account — see how we will and won't contact you.
If you think your login has been compromised
Change your password straight away, and if you can no longer get in, contact us through the official site so we can help secure the account. Tell us if you have shared a code or clicked a suspicious link. For wider safety, see what to do if you think you have been scammed.
We also harden the site itself — secure connections, sensible security headers and identity signals — but the login is a shared responsibility, and these habits are your part of it. For how we protect your information, see how we keep your information secure. For a guide on checking your recent sign-in history for anything out of the ordinary, see reviewing suspicious login activity on your account.
See also: Advance-fee and fake loan offer scams, Choosing a strong password for your business account, How do I spot a scam pretending to be from Credicorp?.