Platform security hub
Discord account security
Discord accounts are targeted because they hold games, payment methods, and — for many players — years of progress. This page lists the official domains, the two-factor options, the recovery path, and the scams that most often cost Discord players their accounts.
Quick security checklist
- Enable two-factor authentication. Discord supports two-factor authentication via an authenticator app, plus passkeys (passwordless login) and hardware security keys (FIDO2).
- Only trust the official domains below for sign-in and support.
- Save the recovery path before you need it — recovery is fastest when you already know the official process.
- Learn the common scams listed below so you recognise them before they cost you the account.
Official domains
Only trust these domains for Discord sign-in and support. Lookalike domains are a common phishing trick.
discord.comTwo-factor authentication
Supported — Discord supports two-factor authentication via an authenticator app, plus passkeys (passwordless login) and hardware security keys (FIDO2).
Account recovery
If your account is stolen, follow our verified, step-by-step guide:
Discord account recovery guide →Official links
Known scam patterns
- Links that steal your Discord token or session
- Fake Nitro giveaways and "free boosts"
- "Verify your account" QR codes that hand over your session
- Fake Discord staff or support direct messages
Frequently asked
Reviewed for accuracy; always confirm on the official Discord site. Capabilities not listed are not asserted here.