Here are some best practices we've put together for protecting your Tumblr account:
- Choose a totally unique password for Tumblr. It’s a good practice to avoid repeating passwords for any of your accounts, and to choose passwords that are a mix of letters, numbers, and symbols. We know, it’s mildly annoying, but the price of freedom is eternal annoyance.
- Make your password long—the longer the better. We recommend passwords over 12 characters in length.
- Always look for the reassuring lock emblem in your browser's address bar at login.
- Never enter your Tumblr credentials on any site other than tumblr.com.
- Never give an application access to your Tumblr account unless it is from a source you trust.
- Never share your account credentials or mobile publishing email address with anyone. Not even your butler.
- Set up two-factor authentication in your account settings, which makes it really difficult for impostors to access your dashboard.
- Make sure you have “Email me about account activity” turned on in your account settings.
- If you use Tumblr on a public computer, always log out of your session by clicking on the account menu at the top of the dashboard and then clicking “Log Out” at the top of the menu. In the app, tap the account icon (looks like a little human), then the gear icon, then "Global settings," then "Log out."