Keep your Talkwish account secure

Your Talkwish account holds your username, your calls and your messages, and at launch your phone number and billing details. A few habits keep it in your hands.

Use a strong password

Use at least 10 characters. A short phrase of a few random words is long and easy to remember.
Use a password you don’t use anywhere else. If another site is hacked, your Talkwish account stays safe.
A password manager can create and remember strong passwords for you.

To change your password, open Settings in the web app, then Security, and use Change password. If you signed in a while ago, Talkwish asks you to sign in again first. If you forgot your password, use the forgot password link on the sign-in page, and we’ll email you a link to set a new one. We never send reset links or codes by text.

Turn on two-step verification

Two-step verification asks for a code from an authenticator app on your phone when you sign in. Even if someone learns your password, they can’t get in without that code.

In the web app, open Settings, then Security.
Under Two-step verification, select Turn on two-step verification, and enter your password.
Scan the QR code with your authenticator app, then enter the 6-digit code it shows for Talkwish.
Save your backup codes. Select Copy all or Download as a text file, and keep them somewhere safe, like a password manager.

Each backup code works once. Use one if you ever can’t get to your authenticator app: on the sign-in screen that asks for your code, choose Use a backup code instead. When you sign in on a computer of your own, you can check Trust this device for 30 days, so that browser doesn’t ask for a code again for a while. Leave it unchecked on a shared computer.

Running low on backup codes? Select Create new backup codes. Your old ones stop working right away.

A passkey lets you sign in with your fingerprint, your face or your device’s screen lock instead of typing your password. There’s no password to steal or type into a fake site.

Open Settings, then Security, and find Passkeys.
Select Add passkey, and give it a name you’ll recognize, like “Work laptop”.
Confirm with your fingerprint, face or screen lock when your browser asks.

Next time, choose Sign in with a passkey on the sign-in page. Your password still works too. To stop using a passkey, for example on a device you no longer have, select Remove next to it. Passkeys need a current version of Chrome, Edge, Firefox or Safari.

Sign out of shared computers

On a shared or public computer, sign out when you’re done, and close the browser.
Don’t let the browser save your password on a computer other people use.
On your own devices, use a screen lock, so nobody else can open your calls and messages.

To see everywhere you’re signed in, open Settings, then Security, and look under Where you’re signed in. Select Sign out next to any browser or app you don’t recognize or no longer use, or choose Sign out of all other devices.

Spot phishing

Phishing messages pretend to come from a company you trust, to trick you into handing over your details.

Talkwish never texts you. We’ll never text you a code, and we’ll never ask for your password or full card number by text, email or phone call.
Real Talkwish messages come by email. Verification codes, password reset links and account alerts come to the email address on your account, or show up in the app.
Check the address before you sign in. The web app is always at app.talkwish.com. If a link takes you anywhere else, close the page.
Be wary of pressure. Messages that say your account will be closed unless you act right away are a common trick.
When in doubt, don’t click. Type app.talkwish.com into your browser yourself, or email us to check.

If your phone or computer is lost or stolen

Act quickly, from another device you trust.

Change your password. Open Settings, then Security, choose a new password and check Sign out of my other devices. If you can’t sign in, use the forgot password link on the sign-in page instead.
Under Where you’re signed in, sign out the lost device, or choose Sign out of all other devices.
If you added a passkey on the lost device, remove it under Passkeys.
Email us from the address on your account, and tell us what happened.

If you set up a find-my-device service from your phone or computer maker, use it to lock or erase the device too.

If you think someone got in

Reset your password right away with the forgot password link on the sign-in page. Resetting it signs you out on every device.
Turn on two-step verification if it isn’t on already.
Check your recent calls, messages and billing for anything you don’t recognize.
Email us from the address on your account, and tell us what you noticed.

For tips on scam calls, see Deal with unwanted and scam calls.