Securing Account

Enable two-factor authentication (2FA) in account settings. It adds a second check after your password and significantly reduces the risk from a stolen password, although no security control makes unauthorized access impossible.

Use a strong, unique password and store it in a reputable password manager. Never share your password, two-factor code, backup code, API key, or session token—Trainmail support will not ask for them.

Review active sessions and recent sign-in notifications regularly. If you see an unfamiliar device or location, revoke that session, change your password, confirm 2FA is enabled, and contact support.

Treat unexpected links and attachments as suspicious, even when the display name looks familiar. Check the full sender address and destination before signing in, and avoid accessing sensitive mail from public or shared devices.