Buddzy's OTP-only authentication is already more secure than most apps, but there are still things you can do to make sure your account stays locked down. Your phone number is your key to everything — protecting it means protecting your entire Buddzy universe.
Essential Security Tips
1. Protect Your Phone
- Use a strong screen lock (biometric, PIN, or pattern) on your phone. This is your first line of defense.
- Enable auto-lock so your phone locks itself after a short period of inactivity.
- Don't leave your phone unattended and unlocked. Basic, but important.
2. Guard Your OTP Codes
- Never share your 6-digit code with anyone. Buddzy will never ask for it outside of the app.
- Be skeptical of anyone claiming to be from Buddzy asking for your verification code. It's a scam.
- If you receive an OTP you didn't request, someone might be trying to access your account. Don't panic — they still need the code.
3. Secure Your Phone Number
- Contact your mobile carrier and enable SIM lock or port protection to prevent unauthorized number transfers.
- If you lose your phone, contact your carrier immediately to suspend your SIM.
4. Stay Updated
- Always keep the Buddzy app updated. Updates include security patches and critical fixes.
- When you see a mandatory update notification, install it right away.
5. Be Smart About Shared Devices
- Always log out of Buddzy if you use someone else's phone.
- Don't log into Buddzy on public or shared devices.
- Remember that logging in on a new device gives full access to your account.
Pro Tips
- The biggest threat to your Buddzy account isn't hackers — it's losing access to your phone number. Keep your carrier info up to date and know your recovery options.
- Buddzy's lockout system (5 failed attempts = 2-minute lockout) protects against brute-force attacks automatically.
- Your login session expires after 30 days of inactivity. If you haven't opened Buddzy in a month, you'll need to re-verify with a new OTP.
Good to Know
Buddzy doesn't store passwords because there are none to store. This means database breaches can't leak your credentials. The OTP model is inherently more secure for most users than traditional password systems. Just keep your phone number safe, and you're golden.