Keeping Your Gala Games Account Secure
If you still have questions or prefer to get help directly from an agent, please submit a request.
We’ll get back to you as soon as possible.
This article explains several security measures and best practices a person can take to keep their Gala Games account information secure.
The purpose of this article is to explain to the reader how to make safe decisions regarding the privacy of their private keys, passwords, transfer codes, and anything else that may put them at serious risk of losing their assets.
This article assumes the reader understands the information in the following articles:
This article will cover a wide variety of best practices a user can take to ensure their account information is safe and secure. These recommendations are listed in no particular order.
1) Enabling 2FA
Two-Factor Authentication is an extra login credential/password that can be added in addition to a username, password or Transfer Code. With this example specifically, it uses a person’s cell phone and a 2FA application to present a user with a series of 6 numbers that are randomly generated roughly every 30 seconds. Enabling 2FA allows for extra security for protecting a Gala Games account.
Please see How To Setup 2 Factor Authentication (2FA) to learn more.
This password section will help users with creating unique and secure passwords for a Gala Games Account login or a Transfer Code.
Use Different Passwords For Different Accounts
When creating a password for logging into a Gala Games account and a Transfer Code, do not use the same password for both. A benefit of having two different passwords is that, if a bad actor is able to get into a user's Gala Games account, they will not be able to get any funds or NFTs out of the account since the password is different.
Length of Passwords Matter
When creating a password, it is recommended to have at least 16 unique characters. The longer the password is for a bad actor to guess, the harder it will be to get access to an account.
Complex Passwords Are Important
Simple passwords such as 12345678 are easily guessable for a bad actor who is trying to get into a Gala Games account. Using longer and complex passwords like G00dLU(kg@L@g^mE$#1! will be a lot harder for a person to guess.
Note: Please do not use the passwords listed in this tutorial to secure a Gala Games Account.
Keep A Password Secure
A person can have the strongest password in the world, but it would be useless if a user forgets what it is. Having a written record of an account's Transfer Code and login credentials in a safe location is important to ensure an account owner keeps the keys to their account without being locked out themselves.
Watch Out For Password Data Breaches
From time to time websites may have data breaches and as a result passwords many accounts may become compromised. Users can use sites such as Have I Been Pwned to find out if an email address or username used for a site has been compromised. It is highly recommend to use a unique password not used on other sites for an account password and Transfer Code.
3) What Information Can Be Shared
This section will be divided into two sections. The first section will discuss what is generally safe to share with others, and the second section will discuss what you should never share with anyone.
What Can Be Safely Shared
1. GALA Address
Why is this safe to share?
It is similar to a home address. If a person wants to send or receive a package, an address is needed to have mail sent and delivered. This is a similar concept to how an address works in blockchain. People need an address if they want to send or receive GALA or NFTs, but it is not something a person may want everyone to know about. It's a person’s choice to choose who knows their wallet’s address.
What Should NEVER Be Shared With Anyone
1. Password (User Created)
2. Transfer Code (User Created)
3. Recovery Seed Phrase (Automatically Generated List of 12 words)
4. Private Key (Automatically Generated List of Characters)
Why are none of these safe to share?
If this information is shared, there is a high likelihood of losing GALA, NFTs, account access, and any other currencies held in that wallet. This information is like the keys and the title to a car. Whoever holds the keys can drive the car, including malicious actors. Whoever holds the title can say it’s theirs.
Under no circumstances will Gala Games employees ever ask for any of this information. Gala Games Employees Will Never Message First In Places Such As Discord.
If someone asks for any of these, please report them to our moderators on Discord at: www.galagames.chat
A user can also contact Support by visiting https://gala.games/submit-a-support-ticket/
4) Website Links
When opening a link, it is important to make sure that the URL is spelled correctly and is not leading to an unfamiliar or fake site.
A person can see that this is the gala.games site by looking in their web browser and reviewing the website address as seen below.