Skip to main content
Version 1.1In review

Make your account more secure

At LuxID, we take online security seriously. To protect your LuxID Account, we strongly recommend you follow the steps below on a regular basis.

Step 1: use a strong, unique password​

It is not safe to use the same password on multiple sites. If your password for one site is compromised, it could be used to access your accounts on other sites.

Make sure you create a strong and unique password for your LuxID Account (see Create a strong password). A good password is:

  • At least 12 characters long
  • A mix of uppercase letters, lowercase letters, numbers, and symbols
  • Not a common word or phrase

Use a password manager​

A password manager can help you create and manage strong and unique passwords. Consider using a trusted password manager such as Passbolt (developed in Luxembourg), Bitwarden or KeePassXC (open source), or 1Password. See Password managers for how they work with LuxID.

Step 2: review your security settings​

Go to LuxID Account (opens in a new tab) > Security to review your current security settings, including:

Turn on 2-Step Verification​

2-Step Verification helps prevent an attacker from getting into your account, even if they steal your password. LuxID supports the following second-factor methods:

  • One-Time Codes sent via SMS or voice call
  • Authenticator apps such as Aegis, FreeOTP, Authy, or Microsoft Authenticator
  • Passkeys (most secure verification step)
  • LuxTrust for identity-proofed authentication

To enable 2-Step Verification, go to LuxID Account (opens in a new tab) > Security. For a full walkthrough of each method, see 2-Step Verification and Passkeys.

Review connected applications​

To better protect sensitive information, review which LuxID Partner applications have access to your account and remove the ones you no longer need.

See Sign in with LuxID for how these connections work and how to remove one.

Turn on screen locks​

Screen locks help protect your devices from being used without your permission. Check your device manufacturer's support site for instructions on setting up a screen lock.

tip

Also hide message previews on your lock screen. By default, many phones show the text of an incoming SMS on the lock screen - which can reveal a one-time code (OTP) even while the phone is locked. Set message previews to appear only after unlocking:

Step 3: update your software​

If your browser, operating system, or apps are outdated, the software may not be safe from attackers. To help protect your account, keep your software updated.

Update your browser​

Make sure you use the latest version of your browser. Check the developer's support site for update instructions.

Update your operating system​

Make sure you use the latest version of your operating system on all your devices. Check the manufacturer's support site for update instructions.

Step 4: remove apps and browser extensions you do not need​

As you install more apps on your device, it can become more vulnerable to attackers. On devices that have access to sensitive information, only install the apps and browser extensions you need. Do not install unknown apps or apps from unknown sources.

Step 5: protect against suspicious messages and content​

Attackers can use emails, text messages, phone calls, and websites to pretend to be institutions, family members, or colleagues.

Avoid suspicious requests​

  • Do not share your password. LuxID will never ask for your password in an email, message, or phone call.
  • Do not reply to suspicious emails, texts, instant messages, webpages, or phone calls that ask for your personal or financial information.
  • Do not click links in emails, messages, webpages, or pop-ups from untrustworthy websites or senders.

Verify emails from LuxID​

Legitimate notifications from LuxID are sent from notification@msg.luxid.lu. If you receive a suspicious email claiming to be from LuxID, do not click any links. Instead, go directly to account.luxid.lu (opens in a new tab) in your browser to check your account.

Learn more: Recognise legitimate LuxID messages and Check you're on a genuine LuxID page.

Stronger protection for higher-risk users​

If you handle sensitive information or could be the target of online attacks - for example journalists, public figures, or activists - combine several measures for the strongest protection:

If you notice suspicious activity on your account​

If you suspect your account may have been compromised:

  1. Change your password immediately at LuxID Account (opens in a new tab) > Security.
  2. Check your 2-Step Verification methods under Security and remove any method you did not set up yourself.
  3. Enable 2-Step Verification if you have not already done so.
  4. Contact LuxID support for further assistance.

For the full steps, see Suspicious activity.

Updated 2026-07-02
On this page