All help topics

Safety and privacy

How do I spot a scam email, text or phone call asking for my password?

Dankore will never ask for your master password by phone, email or text. Here is how to spot a scam and what to do if you get one.

Scammers sometimes pretend to be a company you trust. They try to get your password by phone, email or text. Here is how to stay safe.

The one rule to remember

Dankore will never ask for your master password. Not by phone, not by email, not by text, not in person.

Only type your master password into the Bitwarden app, or into https://secure-vault.dankore.com. Nowhere else.

If anyone asks for it, it is a scam. Even if they sound kind, or say they are from Dankore.

Signs of a scam

  • They say it is urgent, or that your account will be closed today.
  • They ask for a password, a 6-digit code, or a recovery code.
  • They ask you to install a program so they can "fix" your computer.
  • The email has a link to a website address that looks a little odd.
  • They want payment in gift cards or by bank transfer.
  • They call you out of the blue about a "problem" with your vault.

What real emails from us look like

  • They come from an address ending in @dankore.com.
  • They may ask you to press Join, update your card on our billing page, or save a copy of your vault.
  • They never ask you to reply with a password or code.

If you get a suspicious message

  1. Do not click any links in it.
  2. Do not reply, and do not call back the number they give.
  3. Open your browser and type https://vault.dankore.com yourself to check your account.
  4. Forward the email to us at [email protected], or tell us about the call.
  5. Delete the message.

If you think you gave something away

Please do not feel bad. These scams are clever, and they fool careful people.

  1. On a computer, open https://secure-vault.dankore.com and sign in.
  2. Change your master password in your settings. Choose to sign out other devices if asked.
  3. Write the new one on your emergency kit.
  4. If you shared your website account password, change that too at https://vault.dankore.com.
  5. Email us so we can check things with you.

A 6-digit sign-in code is just as private as a password. Never read one out to anyone who calls you.

If someone has your bank details, call your bank using the number on the back of your card.

If you are ever unsure about a message, email us at [email protected]. We answer ourselves, usually the same day.