What to do if your account is accessed suspiciously
Received an unusual login alert or have a doubt? Here is how to react fast and take back control of your account, step by step.
Receiving an unusual login alert can be surprising, but it is first a sign that your account's protection is working: Noryo warns you as soon as a login falls outside your habits. Most of the time, it is simply you, from a new device or another place. If in doubt, here is what to do to check and take back control in a few minutes.
Noryo accesses your bank accounts in read-only mode. Even in the event of unauthorised access to your account, no one can trigger a payment or a transfer from Noryo. Your banking credentials are also never entered or stored in Noryo.
Step 1: identify the login
Start by looking at the alert received by email and the list of your active sessions. There you see where you are signed in. Ask yourself: is this a device or a place I recognise? If yes, there is probably nothing to do. If not, move on to the next steps without delay.
Do you recognise this login?
Step 2: take back control
Sign out the other devices
From your device and session management, end every session except the one you are using. The suspicious device immediately loses access.
Change your password
If you sign in with email and password, choose a new long and unique password that you do not use anywhere else.
Turn on two-factor authentication
It adds a verification step to login, so your password alone is no longer enough to get in.
There is no password specific to Noryo to change: your access depends on your Apple or Google account. Secure that account directly with Apple or Google (password and two-factor authentication), as it is what protects your entry into Noryo.
Step 3: strengthen things for the long term
Once the situation is back to normal, put in place the protections that will keep it from happening again. These tools are available in your account's security settings.
Your available protections
- Two-factor authentication
- A second check at login, backed by backup codes to keep carefully.
- Passkeys
- A passwordless login, linked to your device and your biometrics, so very hard to spoof remotely.
- Biometric unlock
- On iPhone and iPad, Face ID or Touch ID protects the opening of the app.
- Recovery key
- Shown only once, it lets you regain access in certain situations. Keep it in a safe place.
Noryo will never ask you for your password, your two-factor authentication codes or your recovery key by email or message. Any such request should be treated as a fraud attempt.
When to ask for help
If you cannot take back control or if something feels off, contact support. To speed up handling, share your support reference, which you find in your profile. Our teams can guide you without ever asking for your secret credentials.
See where you are signed in and sign out the other devices.