# Account security

> MFA\, sessions\, recovery and the things nobody will ever ask you for\.

*Billing \& payments → Account \& licenses*

## Controls you own

- Authenticator\-based MFA on your account\.
- A reviewable list of active browser sessions\.
- Email verification on every address change\.
- A written record of privileged actions on your account\.

> **PHISHING SHAPE** — A real Knarrion message never asks you to move funds to a \"verification\" address\, never asks for an MFA code\, and never asks for a wallet seed phrase\. When in doubt\, navigate to the site yourself instead of following a link\.

## If you suspect compromise

1. End all other sessions from Account → Security\.
2. Change your password and re\-enrol MFA\.
3. Open a ticket from [Support](/support) with the order reference\.
4. Request License rotation if the Expert was running on a machine you no longer control\.