nexus-access.bizSet up the account once, properly

Everything here is done once and never thought about again. Skipping it is the reason a password leaked from somewhere unrelated turns into a lost account here.

The username

Use one that appears nowhere else. A handle reused from a forum, a game or an email address connects this account to everything that handle has ever done, and that connection is trivial for anybody to make. It costs nothing to invent a new one.

The password

• Long and generated rather than remembered and clever.
• From a password manager running on your own machine, not a browser sync feature.
• Used nowhere else, which is the entire point.

The recovery phrase

Most markets hand you a phrase at registration and it is the only route back into the account if the password goes. Write it on paper before continuing. Not a screenshot, not a note that syncs, not an email to yourself. Paper, stored away from the machine.

Two factor

Turn it on. On these markets it usually works by encrypting a challenge to your key, so signing in requires something only you can decrypt. That converts a leaked password from a disaster into an inconvenience, which is a good trade for five minutes.

What no legitimate service asks for

A wallet recovery seed, a private key, or your password by message. Any page or person asking for those is collecting them. There is no exception to this and no context that makes it reasonable.