Security codes for account protection

An extra layer of security has been added to your settings in an ongoing effort to help keep your DeviantArt account safe. 

Why it's needed

As scams and phishing attempts increase across the web, the vast majority of account compromises on DeviantArt occur when scammers trick users into voluntarily sharing their password or changing their password or account email to one provided by the attacker. This, in turn, gives them access to fully take over their account. 

What's changing

To protect you, certain sensitive actions now require a security code (also called a one‑time password) sent to your email. 

You’ll be sent this code when you: 

• Change the email address on your account

or 

• Turn off password reset emails 

This makes it much harder for a bad actor to fully lock you out, even if they get your password. 

How a common attack works 

• Someone pretends to be DeviantArt staff, asks for your email or password “for verification” or tells you to change it to a specific one.

• They then log in and change your email so recovery emails go to them instead. 

The new security code is designed specifically to block this kind of takeover, while also warning deviants that this sort of request will never come from real DeviantArt staff. 

Learn how to keep your account safe

We will never ask for your password or your verification code. Never change your password or email to something someone else gives you, and never share your password or security code with anyone.

For more information, read up on other ways you can keep your account safe from phishing attempts.