# Account Security

Use when protecting Xiaohongshu account from unauthorized access, preventing account...

- Repository: https://github.com/vivy-yi/xiaohongshu-skills (520 stars)
- Category: Security
- License: see repository
- Last updated: 2026-01-23
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add vivy-yi/xiaohongshu-skills --skill account-security -g -a claude-code -y`
Codex: `npx skills add vivy-yi/xiaohongshu-skills --skill account-security -g -a codex -y`
Cursor: `npx skills add vivy-yi/xiaohongshu-skills --skill account-security -g -a cursor -y`
Gemini CLI: `npx skills add vivy-yi/xiaohongshu-skills --skill account-security -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add vivy-yi/xiaohongshu-skills`

## Description

Use when protecting Xiaohongshu account from unauthorized access, preventing account theft, recovering compromised accounts, or implementing security measures to safeguard account and follower base

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Account Security (账号安全)

## Overview

Account security is the practice of implementing protective measures to prevent unauthorized access to Xiaohongshu accounts, safeguarding personal information and content, and responding effectively to security breaches or account theft.

## When to Use

**Use when**:
- Setting up new account (implement security from start)
- Account has grown in value (followers, content library worth protecting)
- Experiencing suspicious activity
- Recovering from account theft or hack
- Sharing account access (team, assistant)
- Concerned about account safety

**Do NOT use when**:
- Account has no value yet (new account, focus on growth)
- Overly paranoid (basic security sufficient for most)

## Core Pattern

**Before** (vulnerable account):
```
❌ "Simple password '123456', anyone could guess"
❌ "Logged in on public WiFi, account hacked"
❌ "Gave password to assistant, they stole account"
❌ "Account stolen, no way to recover (no proof of ownership)"
❌ "Years of work lost in seconds"
```

**After** (secured account):
```
✅ "Strong unique password + two-factor authentication"
✅ "Only log in on secure networks, devices protected"
✅ "Access log tracks all logins, suspicious activity detected"
✅ "Account recovery plan in place (proof of ownership documented)"
✅ "Team access managed (individual login credentials)"
✅ "Peace of mind: account and followers protected"
```

**5 Security Layers**:
1. **Strong Authentication** - Unique password, 2FA enabled
2. **Secure Access** - Only trusted devices/networks
3. **Access Control** - Manage who can access account
4. **Monitoring** - Track login activity, detect breaches early
5. **Recovery Preparedness** - Document proof of ownership

## Quick Reference

The rest: https://github.com/vivy-yi/xiaohongshu-skills/blob/HEAD/skills/05-平台规则/account-security/SKILL.md