Come Sports Picks
Cricket decision desk
Home › Come Guides › Come Login

Account access, without the pitfalls.

An independent walkthrough of safe account access on the Come platform. Credential hygiene, two-factor choices, recovery preparation, and what to do if access is broken or locked.

Inside

Four desk passes, one safe login.

Walk through the four desk passes in order. They take about ten minutes the first time and five on subsequent visits.

01

Credential safety

Strong passwords, password managers, and credential isolation.

02

Two-factor choices

Authenticator apps versus SMS. Why authenticator wins.

03

Recovery preparation

Recovery codes, recovery email, and an offline backup.

04

Support escalation

What to do if the account is locked and self-service recovery fails.

Credential safety

Build the credential on solid footing.

The Come login credential is the gateway to every other safety feature on the platform. A weak credential exposes every other protection. Build it on solid footing before any other step.

  • Use a unique email address for fantasy-cricket platforms. A breach elsewhere should not put the account at risk.
  • Generate the password in a password manager. Length beats complexity.
  • Store the password only in the password manager, never in a notes app or browser autofill.
  • Rotate the password every 90 days, or immediately if a service you use is breached.
What a strong password looks like

A strong password is at least 16 characters, randomly generated by a password manager, and unique to the platform. No personal dates, no platform names, no dictionary words.

Cybersecurity adviser helping an adult secure a smartphone, displays turned away
Adult organizing a rear-facing phone, blank recovery notes, charging cable and identification envelope on a private desk
Recovery preparation

Prepare for the day the password fails.

The day the password fails is not a day to improvise. Prepare the recovery path while the account is healthy, store the recovery codes offline, and rehearse the recovery flow once a year.

  • Generate the recovery codes the first time two-factor is enabled. Store them in the password manager or a sealed offline envelope.
  • Add a recovery email address that is itself protected by two-factor.
  • Add a recovery phone number only as a last resort. It is weaker than email-based recovery.
  • Document the date the codes were generated. Rotate them once a year or after any device loss.
Self-service account recovery

If access breaks.

If the account is locked or two-factor is lost, the platform's self-service recovery flow is the first place to go. Walk through the steps in order and keep records of every request.

1
Confirm the lockoutIdentify whether the issue is a forgotten password, a lost device, a locked account, or a session timeout. Each has a different recovery path.
2
Use the official recovery flowBegin at the platform's official login page. Use the platform's own password-reset flow, not a third-party tool.
3
Provide the requested evidenceMost platforms will ask for one or more of: the email address on file, the last deposit or withdrawal, the last four digits of a saved payment method, or a recent successful login.
Adult calmly speaking with support through an earpiece while a smartphone lies face down beside blank case notes
Two-factor choices

Authenticator wins, SMS loses.

Two-factor is the second layer of protection on the account. The choice of second factor matters — the wrong choice can be defeated.

A

Authenticator app

The strongest practical option. Codes are generated locally on the device. No network interception. Examples: Aegis, Authy, Google Authenticator, 1Password.

B

Hardware security key

The strongest option overall. A physical key that the platform verifies via USB or NFC. Examples: YubiKey, Titan Key.

C

Push notification

Better than SMS but weaker than an authenticator. Confirmations can be accidentally accepted.

D

SMS

The weakest option. Codes can be intercepted through SIM swap, SS7 attacks, or compromised telco accounts. Avoid where the platform offers anything stronger.

Where to go next

Continue with these reads.

Open the wallet and KYC walkthroughCustomer-care escalation guideRead the responsible-play guide
Reader FAQ

Questions on Come login.

What is the strongest two-factor option?
Hardware security keys are the strongest option overall. Authenticator apps are the strongest practical option for most readers.
Can I recover the account without a phone number?
Most platforms offer recovery through email plus a saved evidence set, but the published flow differs by platform. Read the platform's recovery guide before you need it.
How often should I rotate the password?
Every 90 days is a reasonable cadence. Rotate immediately if a service you use is breached or if the device the password manager lives on is lost.
What if I never received the recovery codes?
Disable two-factor through the platform's recovery flow, then re-enable it and generate fresh recovery codes. Store the new codes in your password manager.

Continue with KYC and wallet setup.

Once login is solid, the wallet and identity-verification walkthrough covers what to prepare and how to confirm the verification page is genuine.

Open KYC walkthroughCustomer-care escalation
Editorial notice. Come Sports Picks is a research publication, not a contest operator, broker, or betting exchange. Nothing on this site is investment, legal, or financial advice. Fantasy cricket involves paid entry fees and the risk of loss; readers should be 18+ and play within their means. Read the responsible-play guide and your local regulations before participating.
Play now