Accounts are usually taken one of two ways: with a password that leaked from another site, or with a code someone was tricked into sharing. A few habits close both doors.
Use a password that’s only for Ayyam
Ayyam asks for at least 8 characters, but longer is better. If you use the same password somewhere else and that site leaks it, people will try it here. A password manager can make and remember a long one for you.
Turn on two-factor authentication
Then a password alone doesn’t get anyone in. They’d also need the code from the authenticator app on your phone. Save your recovery codes somewhere that isn’t your phone.
Keep your email and phone number up to date
They’re how you get back in if you forget your password, and your email is where we warn you when something changes. Check them in Settings → Security. A phone number can only be added in the app.
Never share a code
Nobody at Ayyam will ever ask you for a code we send you. If someone asks for one, it’s someone trying to get into your account.
The same goes for Sign in on a computer. Only scan a code you opened yourself on ayyam.com. If you scan one that someone else shows you and approve it, they’re signed in to your account.
Read our security emails
We email you when someone signs in, and when your password, email, phone number or two-factor authentication changes. If it was you, there’s nothing to do. If it wasn’t, act on it straight away.
Check where you’re signed in
Now and then, look at Where you’re logged in in Settings → Security, and end any device you don’t recognise. If you only ever use Ayyam on one phone, you can also turn on One device at a time: anyone else signing in then signs you out, so you’d know at once.
On a computer that isn’t yours
Sign out when you’re done: open Settings on ayyam.com and click Sign out. If you forget, you can sign that browser out later from your phone, under Where you’re logged in.