Digital asset security is a shared responsibility between the exchange and the user. As a form of protection, Indodax has an automated system that will send a notification email titled "New Login Activity Detected" every time there is login activity from an unrecognized device, location, or browser. This email serves as an early warning system. If you receive this email but do not feel you were attempting to log in, this is a strong indication that someone else might have discovered your email and password information.
Emergency Steps to Take Immediately
If you suspect unauthorized access, immediately take the following mitigation steps:
Use the "Account Security" Feature: Open the Indodax application or website, then go to the Account Security menu. On the list of connected devices, select the device you do not recognize. Click "Log Out of this Device" (if using the application) or "Revoke Session" (if using the website). The system will automatically cut off your account access remotely.
Lock Account via Email: Inside the notification email, Indodax provides a "Secure My Account" button which functions to lock your account temporarily and instantly.
Change Password Immediately: Change your Indodax account password along with your primary email password. Make sure you use a combination of characters that is complex, unique, and has never been used before.
Enable 2-Step Authentication (2FA): If you haven't used it yet, immediately activate this feature via the Google Authenticator application. 2FA is the most powerful layer of protection because hackers will not be able to log in without the unique code generated directly from your physical device (mobile phone).
What If You Did Just Log In?
Please be informed that if you have just logged in using a new device, or have just cleared your browser cache, you are still advised to review the details in the email (such as location and device type). If the data matches the activity you just performed, you can safely ignore the email. Consider this login notification email as the digital security guard of your account. Never ignore this warning for the sake of your digital asset security.