Skip to main content
Version 1.0In review

Secure your account

Security checklist for your LuxID Account​

Your LuxID Account is the key to many online services. Taking a few minutes to secure it now can prevent serious problems later. Work through this checklist to make sure your account is well protected.

Use a strong, unique password​

Choose a password that is at least 12 characters long and not used for any other account. Avoid common words, personal information, and simple patterns. LuxID checks your password against known breached password lists to help you stay safe.

For detailed advice, see Create a strong password.

Enable 2-Step Verification​

2-Step Verification adds a second layer of protection beyond your password. Even if someone learns your password, they cannot sign in without the second step.

LuxID supports several 2-Step Verification methods:

  • One-Time Codes - Receive a one-time code by SMS or voice call each time you sign in.
  • Authenticator app - Use an authenticator app to generate codes (6-digit codes that change every 30 seconds). Some options include Aegis (opens in a new tab) (open source, Android), FreeOTP (opens in a new tab) (open source, iOS/Android), Authy, or Microsoft Authenticator. Many modern password managers also generate these codes, so you can manage your passwords and 2-Step Verification codes in one place.

To set up 2-Step Verification, go to account.luxid.lu (opens in a new tab) > Security > 2-Step Verification. For a full walkthrough of each method, see 2-Step Verification.

For passwordless sign-in, you can also set up a passkey - a phishing-resistant sign-in method that works alongside your password. When you sign in with a passkey, you are not asked for a separate 2-Step Verification step.

Review your connected services​

Periodically check which LuxID Partner services have access to your account and what personal information you have shared with them. Remove access for any service you no longer use.

To review connected services, go to account.luxid.lu (opens in a new tab) > Applications.

Keep your contact information up to date​

Make sure your email address and phone number are current. Outdated contact information can prevent you from receiving security alerts or even accessing your account - for example, if your phone number is required for 2-Step Verification and you have changed it without updating LuxID.

To update your email address and personal details, go to account.luxid.lu (opens in a new tab) > Account. To update your phone number and security settings, go to account.luxid.lu (opens in a new tab) > Security.

Stay alert to suspicious activity​

LuxID notifies you when unusual activity is detected on your account, such as a sign-in from an unfamiliar location. You also receive notifications when important account information is changed, including your password, email address, or phone number.

If you receive a security notification that you did not expect, take action immediately:

Updated 2026-04-17
On this page