{"id":149,"date":"2026-05-29T09:16:34","date_gmt":"2026-05-29T09:16:34","guid":{"rendered":"https:\/\/tutorac.com\/help-center\/2026\/05\/29\/account-security-best-practices-for-tutorac-learners\/"},"modified":"2026-05-29T09:16:34","modified_gmt":"2026-05-29T09:16:34","slug":"account-security-best-practices-for-tutorac-learners","status":"publish","type":"post","link":"https:\/\/tutorac.com\/help-center\/2026\/05\/29\/account-security-best-practices-for-tutorac-learners\/","title":{"rendered":"Account security best practices for Tutorac learners"},"content":{"rendered":"\n<p class=\"has-text-color wp-block-paragraph\" style=\"color:#374151;font-style:italic;font-weight:400\">Your Tutorac account holds your contracts, payment history, training schedule, and personal information. Treating it like any other important account &mdash; banking, email, work &mdash; goes a long way. Here are the practical security habits worth keeping.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"in-this-article\">In this article<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"#password\">Use a strong, unique password<\/a><\/li><li><a href=\"#email\">Secure the email you signed up with<\/a><\/li><li><a href=\"#otps\">Never share OTPs or codes<\/a><\/li><li><a href=\"#phishing\">Recognise phishing<\/a><\/li><li><a href=\"#share\">What never to share with a tutor<\/a><\/li><li><a href=\"#devices\">Devices and public Wi-Fi<\/a><\/li><li><a href=\"#review\">Review your account regularly<\/a><\/li><li><a href=\"#faqs\">FAQs<\/a><\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"password\">Use a strong, unique password<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Length over complexity:<\/strong> 12+ characters beats 8 characters with weird symbols.<\/li><li><strong>Unique to Tutorac.<\/strong> Don&rsquo;t reuse the password from your email, your bank, or any other site. If any of those leak, your Tutorac account is exposed too.<\/li><li><strong>Avoid obvious patterns:<\/strong> your name, birthdate, &ldquo;Tutorac@123&rdquo;, sequential numbers.<\/li><li><strong>Use a password manager<\/strong> (1Password, Bitwarden, your browser&rsquo;s built-in one). It generates a strong unique password and fills it for you &mdash; you only have to remember one master password.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">You can change your Tutorac password anytime under Profile &rarr; <strong>CHANGE PASSWORD<\/strong>. Full steps: <a href=\"\/help-center\/2026\/05\/29\/how-to-change-your-password-on-tutorac-2\/\">How to change your password on Tutorac<\/a>.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1436\" height=\"719\" src=\"https:\/\/tutorac.com\/help-center\/wp-content\/uploads\/2026\/05\/ap-change-password.png\" alt=\"Tutorac Change Password page with Current, New, and Confirm Password fields.\" class=\"wp-image-140\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"email\">Secure the email you signed up with<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Your email is the recovery key to your Tutorac account &mdash; password resets, billing receipts, and security alerts all go there. If that mailbox is compromised, your Tutorac account effectively is too.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Use a strong unique password on your email account itself.<\/li><li>Turn on <strong>two-factor authentication (2FA)<\/strong> on the email provider (Gmail, Outlook, etc.) if available.<\/li><li>Be wary of forwarding rules you didn&rsquo;t set up &mdash; attackers sometimes silently forward your email elsewhere.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"otps\">Never share OTPs or codes<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Any one-time password (OTP) or verification code &mdash; sent by SMS, email, or an authenticator app &mdash; is for <em>you only<\/em>. Tutorac will never call, message, or email asking you to read an OTP back to them. Nor will any legitimate company.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you receive an OTP you didn&rsquo;t request, it may mean someone is trying to access your account or password-reset flow. Don&rsquo;t share it, don&rsquo;t click any links in the same message, and consider changing your Tutorac password as a precaution.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"phishing\">Recognise phishing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Phishing is the most common way accounts get hijacked. Watch for:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Sender domain mismatch.<\/strong> A real Tutorac email comes from a tutorac.com address. <code>tutorac-support.io<\/code>, <code>tutorac.help-mail.com<\/code>, or any free-mail address claiming to be Tutorac is phishing.<\/li><li><strong>Suspicious links.<\/strong> Hover over a link before clicking; if it points to <code>tutoracc.com<\/code>, <code>tutorac.payments-now.net<\/code>, or any URL that isn&rsquo;t <code>tutorac.com<\/code> \/ <code>tutorac.org<\/code>, don&rsquo;t click.<\/li><li><strong>Urgent or threatening tone.<\/strong> &ldquo;Your account will be deleted in 1 hour&rdquo;, &ldquo;Verify now or lose access&rdquo;. Real account actions don&rsquo;t happen on countdowns.<\/li><li><strong>Requests to confirm password or card.<\/strong> Tutorac never emails asking you to type or send these details.<\/li><li><strong>Attachments you didn&rsquo;t expect.<\/strong> Don&rsquo;t open them.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">When in doubt, ignore the email and sign in directly via your browser at <code>tutorac.com<\/code> (or <code>tutorac.org<\/code> for non-India accounts). Anything important will be visible inside your account &mdash; you don&rsquo;t need the email&rsquo;s link.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"share\">What never to share with a tutor<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Your Tutorac password (or password to any account).<\/li><li>OTPs or 2FA codes.<\/li><li>Full card number, CVV, expiry date.<\/li><li>Net-banking username \/ password \/ transaction PINs.<\/li><li>Government IDs (PAN \/ Aadhaar \/ SSN \/ passport) unless a verified, official Tutorac process requires it.<\/li><li>Remote-access invitations (TeamViewer, AnyDesk, etc.) &mdash; no legitimate tutor needs control of your computer to teach.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Tutors don&rsquo;t need any of these to teach you. If they ask, decline, end the conversation, and <a href=\"\/help-center\/2026\/05\/29\/how-to-report-a-tutor-or-content-issue-on-tutorac\/\">report them<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"devices\">Devices and public Wi-Fi<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Sign out from shared devices<\/strong> (a friend&rsquo;s laptop, a cyber-cafe, a hotel business centre).<\/li><li><strong>Don&rsquo;t save your password<\/strong> in someone else&rsquo;s browser.<\/li><li>On public Wi-Fi (airports, cafes), prefer using mobile data or a trusted VPN for anything involving sign-in or payments.<\/li><li>Keep your OS and browser <strong>updated<\/strong> &mdash; security patches close known attack paths.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"review\">Review your account regularly<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Glance at your dashboard once a week &mdash; do you recognise every active batch and every recent payment?<\/li><li>Check the email associated with your account &mdash; is it still correct?<\/li><li>Open the Notifications page now and then &mdash; anything you didn&rsquo;t expect?<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Catching anything off early makes recovery far easier than discovering it months later.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"faqs\">FAQs<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Does Tutorac have two-factor authentication?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Tutorac may use email-based or OTP-based verification on certain flows (sign-up, password reset). Strengthen the security around your <em>email<\/em> account too, since email is your recovery channel.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">I use Google \/ LinkedIn sign-in. Is that more secure than a password?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Generally yes &mdash; especially if your Google or LinkedIn account has 2FA enabled. You inherit those providers&rsquo; security and don&rsquo;t introduce a new password to guard. The trade-off is that if that provider account is lost, your Tutorac access is too.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">My phone was lost \/ sold. Should I do anything?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Yes &mdash; from another device, sign in to Tutorac and change your password (this forces a sign-out on the lost phone). Also reset the password on the email account associated with Tutorac, and on any password manager.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">I got an SMS from &ldquo;Tutorac&rdquo; with a payment link. Should I pay?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Almost certainly phishing. Tutorac payments only happen inside your Training Batch&rsquo;s payment tab when you&rsquo;re signed in via your browser. Ignore SMS links; sign in directly and check there.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How do I know if my account has been accessed by someone else?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Common signals: notifications you didn&rsquo;t generate, contracts or batches you didn&rsquo;t accept, password changes you didn&rsquo;t make, profile fields you didn&rsquo;t update. If you see any of these, go to the next article: <a href=\"#\">What to do if you suspect your account is compromised<\/a>.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">Related articles<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"\/help-center\/2026\/05\/29\/how-to-change-your-password-on-tutorac-2\/\">How to change your password on Tutorac<\/a><\/li><li><a href=\"\/help-center\/2026\/05\/29\/avoid-scams-always-communicate-and-pay-through-tutorac\/\">Avoid scams: always communicate and pay through Tutorac<\/a><\/li><li><a href=\"\/help-center\/2026\/05\/29\/how-to-report-a-tutor-or-content-issue-on-tutorac\/\">How to report a tutor or content issue on Tutorac<\/a><\/li><\/ul>\n\n\n\n<p class=\"has-text-color wp-block-paragraph\" style=\"color:#9ca3af;font-size:13px\">Last updated: 29 May 2026<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Practical account-security habits for Tutorac learners: strong unique password, secure your sign-up email, never share OTPs or codes, recognise phishing emails and SMS, what never to share with a tutor (passwords, card details, government IDs, remote-access invites), devices and public Wi-Fi hygiene, regular account review, and 5 FAQs.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[32,47],"tags":[],"class_list":["post-149","post","type-post","status-publish","format-standard","hentry","category-for-learners","category-learners-safety-trust"],"_links":{"self":[{"href":"https:\/\/tutorac.com\/help-center\/wp-json\/wp\/v2\/posts\/149","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tutorac.com\/help-center\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tutorac.com\/help-center\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tutorac.com\/help-center\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tutorac.com\/help-center\/wp-json\/wp\/v2\/comments?post=149"}],"version-history":[{"count":0,"href":"https:\/\/tutorac.com\/help-center\/wp-json\/wp\/v2\/posts\/149\/revisions"}],"wp:attachment":[{"href":"https:\/\/tutorac.com\/help-center\/wp-json\/wp\/v2\/media?parent=149"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tutorac.com\/help-center\/wp-json\/wp\/v2\/categories?post=149"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tutorac.com\/help-center\/wp-json\/wp\/v2\/tags?post=149"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}