Signing in to Amazon and eBay safely

The short version

1. Add a passkey to Amazon and eBay, so you sign in with your device's fingerprint, face or PIN.
2. Turn on two-step verification, preferably with an authenticator app.
3. Never give your password or any code to someone who calls, texts or emails you.

Passkeys: sign in without a password

A passkey is saved in your Apple, Google or Microsoft account. When you sign in, your phone or computer asks for the same fingerprint, face or PIN you use to unlock it. There is nothing to type and nothing a scammer can ask you to read out. Passkeys need a fairly recent device, such as iOS 16, Android 9 or Windows 11 or later.

• Amazon: Your Account, Login & security, then "Set up" next to Passkey. Source: Amazon help: About passkeys.
• eBay: Account, Sign-in and security, then Passkeys. Source: eBay help: Keeping your account secure.

Screen reader notes

• The passkey request comes from your phone or computer, not from the web page. Confirm it the same way you unlock your device.
• If Face ID does not recognize you because it expects you to look at the screen, you can turn off "Require Attention for Face ID" in Settings, Face ID & Passcode. Using your passcode instead also works.

Two-step verification

With two-step verification, signing in on a new device also needs a 6-digit code. Even if someone learns your password, they cannot get in without the code.

Amazon

Go to Your Account, Login & security, and edit the two-step verification settings. Codes can come by text message or from an authenticator app, and Amazon requires a backup phone number or app before you can turn it on. Source: Amazon help: What is two-step verification.

eBay

eBay can confirm your sign-in with a notification in the eBay app, a text message, or an authenticator app. eBay recommends an authenticator app such as Google Authenticator, Microsoft Authenticator or Authy, because it is harder to intercept than a text. Source: eBay help: Keeping your account secure.

Screen reader notes

• Setting up an authenticator app means scanning a square barcode on the screen. If you cannot aim the camera, look for a link such as "Can't scan the code?" that shows a text key you can copy into the app instead.
• On iPhone, the built-in Passwords app can also store verification codes and fill them in for you.
• Codes by text message are easiest to start with: on iPhone they appear above the keyboard as "From Messages".

If you use passwords

• Use a different password for Amazon, eBay and your email. If one leaks, the others stay safe.
• Let a password manager create and fill them: the Passwords app on iPhone and Mac, Google Password Manager on Android and Chrome, or a dedicated app. You never have to type or remember them.
• Protect your email account most of all. Whoever controls your email can reset your store passwords.

Spotting fake calls, texts and emails

Amazon says it never asks for your password, a one-time code, gift card details or bank card details over the phone, never asks you to buy gift cards, and never texts you asking for personal or payment information. Source: Amazon help: Identifying a scam.

• Warning signs: a problem that must be fixed right now, a large order you did not place, a refund that needs your card, or a request to install an app or share your screen.
• Do not use the phone number or link in the message. Open the Amazon or eBay app or website yourself and check Your Orders and your messages there.
• Report fake Amazon messages to reportascam@amazon.com. For eBay, use Help & Contact on ebay.com.

If something goes wrong

• If you gave out your password or a code, change your password at once from the official site or app, then check your orders, addresses and payment methods.
• Then contact the store through its own website or app. Amazon's accessibility team is under Contact Us, "Accessible Support for Customers with Disabilities"; see our account guide.
• If a card was used, call the number on the back of the card or in your bank's app.

More in this series: creating an account and paying without a credit card.