Secure the account as soon as delivery is complete. The first login is when you move control from the seller's setup to your setup, and it is the easiest time to catch missing details.
📋 First-login checklist
Change the account password to a unique password you do not use anywhere else.
Change or confirm the registered email where the publisher allows it.
Bind your own authenticator or 2FA method.
Remove saved payment methods, old recovery phone numbers, and third-party OAuth links where possible.
Save recovery codes, backup codes, and handoff details in a password manager.
Log out other sessions if the publisher offers that option.
Avoid datacenter VPNs, rapid country switching, bots, cheats, and RMT behavior.
⚠️ If something looks unusual
Publisher security emails and login checks can happen after a handoff. Some are normal. Some are not. If you see a lock, recovery email, unexpected 2FA prompt, or message saying someone else is trying to access the account, stop and read What should I do if my account is locked or recalled? before trying many fixes at once.
🚫 What this does not do
Good security reduces risk, but it is not a promise that publishers will never act on an account. The What does the account warranty cover? covers seller-related recall issues; it does not cover penalties caused by your own post-purchase behavior.
⚠️ Do these in order: change the password first, switch the recovery email second, bind your own authenticator third. Doing them out of order can lock you out of one of the steps.