The first 10 minutes: securing a new account

The moment an account is delivered, do these three things - in this order - before anything else. It's the same routine our own team runs on every account before it ever gets handed off.

1. Change the recovery email first

Whoever controls the recovery email controls the account — see Reddit's User Agreement on account ownership and responsibility. Point it at an inbox only you can access.

2. Rotate the password

Use a long, unique password from a password manager. Never reuse one.

3. Turn on two-factor authentication

Once the email is yours, enable 2FA — Reddit's Help Center walks through the setup — so a leaked password alone can't unlock the account.

• Prefer an authenticator app over SMS.
• Save the backup codes somewhere safe.

Then slow down

With security handled, resist the urge to post immediately. A calm first day is the healthiest start — the same patience we put into every account before it's ever listed.

Browse the accounts we've grown by hand →