Phone Security Checklist Before Opening Any Online Account
Before you open a new online account, secure your phone. A practical checklist covering screen lock, SIM PIN, WhatsApp two-step, app sources and passwords.
In Bangladesh, the phone is the bank, the wallet, the chat app and the login device all at once. When someone opens a new online account, whether for shopping, a mobile wallet or a gaming platform, almost everything depends on the safety of that single device. If the phone is weak, no password can protect you. This checklist covers what to set up before you create any new account.
1. Use a real screen lock
A swipe pattern or a simple 1234 PIN can be guessed by anyone who watches you unlock the phone. Use a six-digit PIN or a strong password, and turn on fingerprint or face unlock if your phone supports it. Set the screen to lock automatically after a short time.
2. Add a SIM PIN
If your phone is stolen, a thief can move your SIM to another phone and receive your OTP messages. A SIM PIN stops that. You can set it in your phone's security settings. Write the PUK code from your SIM card packet somewhere safe in case you forget the PIN.
3. Turn on WhatsApp two-step verification
Many services use WhatsApp for support and confirmations. Open WhatsApp settings, go to Account, then Two-step verification, and set a six-digit PIN. Add an email address so you can reset it. Never share the registration code WhatsApp sends by SMS with anyone.
4. Install apps only from trusted sources
Fake APK files shared in groups are one of the most common ways phones get infected. Install apps only from the Google Play Store or the Apple App Store, and check the developer name and reviews. Many platforms work perfectly in the browser and do not need an app at all.
5. Update your phone
System updates fix security holes. Turn on automatic updates for both the operating system and your apps. An old, unpatched phone is an easy target.
6. Create a unique password for every account
Using the same password everywhere means one leak opens every door. Create a different password for each important account. A simple method is to use a short phrase plus numbers and symbols that only you would remember. A password manager makes this even easier.
7. Separate your wallet PIN from everything else
Your bKash, Nagad or Rocket PIN should never be used as a password anywhere else. Never type it anywhere except inside the official wallet app or the official USSD menu.
8. Know who you are dealing with
For platforms that open accounts through agents, verify the agent before sharing anything. Match their name, ID and WhatsApp number on the official list. This new account opening guide explains which details an agent should ask for and which they never should.
9. Change temporary passwords immediately
If an account is created for you with a temporary password, log in and change it at once. Until you do, someone else knows your password.
10. Keep a simple security note
Write down, in a safe place offline, which email and phone number each account is linked to. If you ever lose access, this note will save a lot of time.
A quick summary
| Area | Action |
|---|---|
| Screen | Six-digit PIN or password, auto-lock |
| SIM | SIM PIN enabled |
| Two-step verification PIN | |
| Apps | Official stores only |
| Passwords | Unique for every account |
| Wallet PIN | Never reused, never shared |
Final thought
Ten minutes of setup protects every account you will ever open on that phone. Do it once, and check it every few months. For more account and safety guides, visit the 9wicketsproagents homepage.
This article is for general information and for readers aged 18 and over.


