# Account Security & Recovery



Signs Your Account May Be Compromised [#signs-your-account-may-be-compromised]

* Unauthorised login notifications
* Unexpected wallet connections
* Missing tokens or changed staking positions
* Email or password changes you didn't make
* Suspicious activity in transaction history

Immediate Actions [#immediate-actions]

1. Secure your wallets [#1-secure-your-wallets]

* Disconnect/Unlink all wallets from Alkimi Labs immediately
* Transfer any tokens to a new, secure wallet
* Never reuse compromised wallet addresses

2. Change credentials [#2-change-credentials]

* Change your Alkimi Labs password immediately
* Update your email password if you suspect email compromise
* Enable two-factor authentication on email

3. Contact support [#3-contact-support]

* Create an urgent support ticket at the Support page
* Provide your account email, suspected compromise date, and any suspicious activity details
* Do NOT share passwords or seed phrases with support

Account Recovery Process [#account-recovery-process]

If you lost access [#if-you-lost-access]

1. Click "Forgot Password" on the login page
2. Enter your registered email address
3. Follow password reset instructions sent to email
4. Create a new secure password
5. Log in and verify all connected wallets

If email was compromised [#if-email-was-compromised]

1. Regain control of your email account first
2. Change your email password
3. Access Alkimi Labs and update your password
4. Review all connected wallets and account activity
5. Contact support if you see unauthorised changes

If wallet was compromised [#if-wallet-was-compromised]

1. Create a new Sui wallet immediately
2. Connect the new wallet to Alkimi Labs
3. Contact support to discuss staking position transfer options
4. Never send tokens to the compromised wallet again

What Support Can and Cannot Do [#what-support-can-and-cannot-do]

| Support CAN                              | Support CANNOT                             |
| ---------------------------------------- | ------------------------------------------ |
| Verify your identity through KYC records | Recover lost seed phrases or private keys  |
| Investigate suspicious account activity  | Reverse blockchain transactions            |
| Help disconnect unauthorised wallets     | Access your wallet without your permission |
| Provide guidance on account security     | Recover tokens sent to wrong addresses     |

Security Warning [#security-warning]

No Alkimi team member will ever DM you first. Anyone contacting you offering to "help recover" your account or "migrate" your tokens is a scammer. Always verify information through official channels.