Here are some things you can do to help protect your eBay account and keep your personal data safe.

Change your password regularly

To keep your account secure, we recommend updating your password regularly. Choose a strong password that's difficult for others to guess.

Follow these tips for creating a strong new password:

Avoid using personal details such as your name, birth date or username
Consider using a phrase (for example, a song lyric or book title)
Use numbers and special characters
Don't use the same password that you use on other accounts

If you think your eBay account has been compromised or hacked, you should change the passwords for both your eBay account and personal email account. Your email password should be different from your eBay password.

To find out more, read our article on changing your password.

Passkeys

Passkeys are an alternative to passwords that allow you to sign into your eBay account using biometric authentication such as a fingerprint, Face ID, Touch ID, pattern or pin. This means you don't need to enter your password, and it will help protect your eBay account against unauthorized access. Additionally, passkeys enable smoother sign-ins by allowing synchronization across devices linked to the same password manager.

Certain passkeys, such as face and fingerprint ID, use biometric data, but this data is never shared with eBay.

Eligible devices

Apple:

Safari and Chrome browsers running on:

iOS: iOS 16 or later
iPadOS: iPadOS 16 or later
macOS: macOS 13 Ventura or later

Google:

Android 9 or later. A Chrome browser is required for web use

Windows:

Windows 10 or later

Setting up and using a passkey

Once you've signed in to the eBay account you'll be prompted to sign in faster with the passkey option. Follow the prompt to create a passkey.

Alternatively, you can also go to Account > Sign-in and security > Passkeys in your web browser to add a passkey.

iPhones save your passkeys in iCloud Keychain, allowing them to be used automatically whenever you log in with the same Apple ID on another device
- You should make sure iCloud Keychain - opens in new window or tab is activated before setting up passkeys
Android devices keep passkeys in Google Password Manager, making them available across all your Android devices when logged in with the same Google account.
- If you're using an Android device, ensure you're logged into the correct Google account - opens in new window or tab for smooth syncing across devices.
For Windows, the passkey is saved locally on your Windows device and protected by Windows Hello.

If your passkey fails, you'll receive an error message and be prompted to log in using your username and password.

When signing in to another eBay marketplace from your browser (for example, eBay.co.uk), you'll need to either set up a new passkey or sign in using another method.

Turning off a passkey

Go to Account > Sign-in and security > Passkeys in your web browser > Select Turn off on the right-hand side. You'll be prompted to sign in with your passkey.

You'll be redirected back to the Sign-in and security page, where you'll see a confirmation message saying you turned off your passkey.

Add 2-step verification

To add an extra layer of security to your eBay account, we strongly recommend you enable 2-step verification. Once you've enabled 2-step verification, only you can access your account, even if someone else has obtained your password.

Once you've switched on 2-step verification, each time you sign into your account you'll be able to confirm your identity via an eBay app push notification, by entering a code we send you by SMS, or one-time passcode generated by an authenticator app.

Here's how to set up 2-step verification on the eBay app:

Download the latest version of the eBay app.
Sign in to your account.
Go to My eBay and tap Settings.
Go to Sign in and security and then choose 2-step verification.
Tap Turn on beside Use the eBay app.

Here's how to set up 2-step verification by SMS:

Sign in to your eBay account.
Go to your name in the top left-hand corner and choose Account settings from the dropdown menu.
Select Sign in and security.
Select Edit next to 2-step verification.
Select Use text next to Text messages on mobile.
Follow the on-screen prompts to add your mobile number.

Here's how to set up 2 Step Verification using an authenticator app:

Sign in to your eBay account.
Go to your name in the top left-hand corner and choose Account settings from the dropdown menu.
Select Sign in and security.
Select Edit next to 2 Step Verification.
Select Authenticator App.
Install the authenticator app from your phone’s app store. We recommend Google Authenticator, Microsoft Authenticator or Authy.
Scan the QR code to add eBay to your authenticator app.
Confirm the 6-digit code generated by your authenticator app on eBay.

If you change your mind and want to switch 2-step verification off – or you'd like to change from SMS to app notifications or vice versa – simply follow the steps above to turn off the function. We'll also send you an email to let you know when you've switched 2-step verification on or off.

Receiving invalid code error

Ensure you leave your browser window open until the email code is received. Don’t leave the sign in page, close or click back on the browser, otherwise the old code will be revoked and you will receive the error message.

General troubleshooting for SMS and email issues

15-minute code delivery window – Make sure to enter the code with the 15-minute window. The code is invalid after 15 minutes. Be sure to check your spam folder if you’re not seeing it in your inbox
SMS/Text message – Make sure you can receive SMS/Text messages and that you have proper reception before sending the code. Landlines are not supported
Are you using multiple SIM cards – Make sure that the SIM settings are set to either SIM1 or SIM2, depending on which one the proper number is
Network type of the mobile phone – Make sure you have the proper network type selected in the settings. Usually this should be "Automatic" and selecting from G3, G4 or G5
Do you have a PIN verification system – Make sure to use your system verification PIN to login. (Face ID, Fingerprint, Windows 10/11 PIN, etc.)
Is SMS encryption setup – When using apps like Signal or Treema, some users do not receive our SMS

Add a trusted device

If you see "Remember this device" when you sign in using 2-step verification, you can select the link to add your device as a trusted device. Next time you sign in using the trusted device, you may not be prompted for a 2-step verification, but your account will still be secure.

Keep in mind that if you change your 2-step verification method or remove a trusted device, you'll need to follow the steps to add the trusted device again. You can add up to 100 trusted devices to your eBay account.

Update your contact details

It's important to keep your contact information up-to-date to help us reach you quickly with any updates about your account.

If you change your address or phone number or set up a new email address, please update your contact details as soon as possible so your account information remains correct.

Watch out for spoof or phishing emails

Spoof or phishing emails are emails that claim to be from eBay and are sent with the intent of accessing your passwords and other sensitive information. If you receive a suspicious email claiming to be from eBay, you should immediately forward the message to us at spoof@ebay.com. Don't click any links in the email or open any attachments. We'll let you know that we received your email, and we will investigate.

Find out how to spot suspicious emails in our article on Recognising spoof and phishing attempts.

Report any strange activity on your account

It's a good idea to check My eBay - opens in new window or tab and your preferences - opens in new window or tab regularly to make sure no one has accessed your account or made changes without your permission. Check your active bids and listings in My eBay - opens in new window or tab to make sure they're yours. If anything has changed without your authorisation, contact us straight away.

We'll notify you by email if a new device is used to sign in to your account that hasn't been used to access your account before. If you don't recognise the login details, contact us to let us know. You should also change your password.

If you think someone is trying to take over your account, for your protection, we may place a temporary hold on your account until we can safely return control of it to you. We can also help you remove any unauthorised fraudulent bids or listings.

Tip
Signs that your account has been taken over include seeing listings or bids that you didn't make, or noticing that your password has been changed without your knowledge. For more information, read our article on Getting help with a hacked account.

Account security