1. Use a password you haven't used anywhere else
This is the single most useful habit. If you reuse a password and another site leaks it, anyone who finds it can try it here. Choose one that is only for Winbox, long enough that it isn't a word or a birthday, and easy for you to type correctly on a phone.
A password manager, or a note kept somewhere private, is better than memory. Just don't send it to yourself in a chat.
2. Write down your UID
Your UID is the account identifier you pick when you sign up, and you need it to log in. People lose it more often than they lose their password. If you're still at the sign-up stage, take a minute at Winbox registration to choose one you'll remember, then note it down once it's accepted.
If you're not sure what it is exactly, how the UID works explains it in plain terms.
3. Never share a verification code or password
A verification code (OTP) is meant for you alone. Nobody who is genuinely helping you needs it, and neither does anyone who "works for support". The same goes for your password. If someone asks, the answer is no, however friendly or urgent they sound.
4. Open Winbox from a bookmark, not a message
Lookalike pages are easy to make, and a link in a chat or an ad can lead to one. Once you've checked the address, bookmark it, and start from the bookmark every time. That's the safest route to Winbox account access.
If a link ever worries you, read spotting a lookalike Winbox page before you type anything into it.
5. Install the app only from the page you reached yourself
On Android, an APK is installed outside the Play Store, so you're trusting wherever it came from. Use the Winbox download page you reached yourself, never a file someone sent you in a chat.
You also don't have to install anything. H5 works in a browser, and H5 versus the app helps you decide.
6. Keep your contact details up to date
Your phone number or email is how the platform reaches you, and often how you get back into the account if something goes wrong. If you change number or email, update the account while you still can. Recovery is much harder once the old one is gone.
For what that recovery looks like, see getting back into your account.
7. Log out on shared devices, and lock your own
On a shared, borrowed or work device, log out when you finish. Closing the tab doesn't always do it. On your own phone, use a screen lock, so whoever picks it up can't open a session that is still signed in.
8. Don't rush money decisions
Scams push you to act fast: log in now, verify now, pay a "fee" to unlock your account. A real problem rarely needs you to hurry or to pay someone to fix it. Slow down, and decide on a budget before you play, not after.
For setting limits and knowing when to stop, the page on playing within limits is worth a read.
If something slips
- Typed your details into a page you doubt? Stop, then change your password using whatever option the platform offers, and tell its support option.
- A login suddenly fails? Don't assume the worst. Work through the login troubleshooting steps first.
- Don't create a second account to get around a problem. It doesn't recover the first.
What we can't tell you
We haven't verified what security features the platform offers, so we don't list any here. These are everyday habits that apply to almost any online account. Check the platform's own pages and support for anything specific, and use Winbox home on this site to find the rest of what we cover.
