Your data is important and valuable, and "phising" attacks are getting more sophisticated by the day. There is a simple step that you can take to improve the security of your information, and we recommend it for Xero (we use it in the office to protect your stuff at our end too). It's called "2 Step Authentication" (2SA). This might sound high-tech, but is an easy to use security feature. We use Google Authenticator and it works well. It's an App that runs on your phone that you download from the Apple App Store or the Google Play store.