Don’t give anyone your password

There are no circumstances in which a company will ask for your password via email, text, phone or any other means of communication except for where you normally type it in on the site itself. Similarly, no person who already has access to your account — whether they’re the IT department at your company, a university, your employer or anyone else — will ever need to know your password via these methods.