Your affiliate account is part of your Client Area account and deserves the same protection.
THE BASICS
A long, unique password, not reused anywhere Two-factor authentication enabled under Account > Security Settings An email address you monitor The backup code stored safely
WHY IT MATTERS
Your affiliate balance is money. An account takeover could redirect a payout, or use your account for prohibited promotional activity that forfeits your balance.
Your Client Area account also controls your hosting and domains, so the stakes are broader than commission.
WHAT TO WATCH FOR
Payout requests you did not make Changes to your payout details Referral statistics that do not match your activity Login notifications from locations you do not recognise
IF SOMETHING LOOKS WRONG
Change your password immediately, enable two-factor authentication if it is not already on, and open a ticket.
PHISHING
Messages claiming your affiliate account needs verification, or offering a large pending payout that requires you to log in urgently, are a standard attack. Log in by typing the address yourself.