Security tips
The security of your Paribu account depends on the security tools provided as well as on your habit of using them correctly. A strong password, layered authentication, secure device usage, and regular checks help keep your account protected.
Raise your security level
Your account security on Paribu is evaluated at three levels based on the verification methods you enable. You can see your current security level at the top of security settings and reach a higher level by completing the recommended steps.
| Level | Condition |
|---|---|
| Critical | No security step is enabled |
| Medium | One or two of the three steps are enabled |
| Secure | 2FA + passkey + biometric authentication (all three) are enabled |
To raise your security level to Secure, it is recommended to complete the following three steps:
- Two-factor authentication (2FA) — Generate one-time codes with Google Authenticator
- Passkey — Authenticate with your face, fingerprint, or device password
- Biometric authentication — In-app approval with Face ID or fingerprint
Note: When all three security steps are used together, critical actions such as sign-in and crypto asset withdrawals are protected with multiple layers.
Create a strong password
Your password is the first layer of access to your account; it must be hard to guess and unique to you. On Paribu, your password must be at least 8 characters long and contain at least one uppercase letter, one lowercase letter, and one digit.
- Do not use predictable information such as your date of birth, Turkish ID number, or phone number as a password
- Avoid sequential or consecutive characters such as
123456orabcdef - Set your Paribu password as different from passwords you use on other platforms
- Change your password at regular intervals
Warning: After you change your password, for your security you cannot make a crypto asset withdrawal for 48 hours. This restriction protects your account against withdrawal attempts after unauthorized access.
If you have forgotten your password or encountered a suspicious situation, you can start password change and reset steps from security settings.
Do not share your sign-in credentials with anyone
Your Paribu password, 2FA code, SMS verification code, and email verification code are information specific to you. Even with people you trust, they should not be shared and should not be transmitted through different channels.
- Do not share your password, 2FA code, or verification codes with anyone
- Avoid keeping this information physically written down
- People claiming to be Paribu representatives never request this information
If you encounter suspicious communication or an information request, you can review the How to protect against phishing and fraud article.
Pay attention to session and device security
Keeping the devices and sessions where you sign in to your Paribu account safe prevents your information from falling into third-party hands. Avoid signing in from devices open to public use such as internet cafes; use a secure network and a device you recognize.
- Use Paribu only on your own device or a device you trust
- Sign out when your actions are complete
- Do not sign in to your account on insecure Wi-Fi networks; if possible, prefer a personal mobile data connection
- Regularly check all devices that have access to your account from the Manage devices section in security settings
- End the session of devices you do not recognize or no longer use
The device list shows the date, IP address, and location for each device. When you notice a suspicious session, you can close only that session by tapping the delete icon next to the device, and close all active device sessions by using the End sessions on all devices option.
Track failed sign-in attempts
The Failed logins section in security settings shows failed sign-in attempts to your account within the last 7 days, along with date and IP address. By regularly checking this information, you can detect unauthorized access attempts to your account early.
- Review failed sign-in history at regular intervals
- If you see locations you do not recognize or repeated attempts, change your password and enable 2FA
- If there is activity you suspect, contact Paribu Support
Protect your account in a suspicious situation
When you notice unusual activity on your account or suspect it has been compromised, you can quickly secure your account by sending an SMS to 0850 303 60 00 from the phone number registered to your Paribu account, with the text KİLİTLE. After the message, your account is temporarily closed to actions.
Once your account is secured, you can start the live support chat through Paribu Support to report the situation and learn the steps required to reactivate your account.
Frequently asked questions
How can I check my security level?
When you go to Security settings, your current security level (Critical, Medium, or Secure) appears in the top section. You can also track which security steps you have or have not enabled from this screen.
How often should I change my password?
It is recommended to change your password at least every 3-6 months. In addition, change your password immediately if you notice suspicious activity, have used your password on another platform, or have lost your device.
Can I sign in to my Paribu account on more than one device?
Yes. You can see all devices that have access to your account from the device management section and end their sessions any time. For your security, it is recommended to close sessions on devices you do not recognize or no longer use.
What does the IP address shown for failed sign-in attempts actually represent?
The IP address is the identifier of the internet connection where the failed sign-in attempt was made. Failed attempts coming from a location you recognize may be due to a mistyped password. If you see repeated attempts from a location you do not recognize, change your password and enable 2FA.
I have locked my account. How can I reactivate it?
Once your account has been closed via the KİLİTLE SMS, you can create a reactivation request by starting the live support chat through Paribu Support. After identity verification steps, the support team reopens your account for use.
Related articles
- How to protect against phishing and fraud — Protecting against phishing and fraud
- How to set up two-factor authentication (2FA) — Setting up 2FA authentication
- What is a passkey? — What a passkey is
- What is device management and how to use it — Managing connected devices
- How to view failed sign-in history — Viewing failed sign-in records
Author:
Paribu