Logging In to Mars Market
Logging in is the moment a lookalike does its damage, because it is the moment you hand over a credential. The login itself is simple. A passphrase, and a two factor code if you have it on. The protection is in what you check before you type anything, and that is the whole of this guide.
Check the address first
Before you enter a single character, confirm the address in the bar matches a verified mirror. Match it to the signed canary if you are being careful. A lookalike login page looks identical to the real one, and the address is the only thing that gives it away.
Enter the passphrase and code
Type your passphrase and the two factor code from your authenticator. The market treats a login from a new device as a new circuit even when the passphrase matches, so an unexpected sign in shows up right away rather than later. That is the two factor layer doing its job.
What a wrong page looks like
If the login asks for your mnemonic, it is not the real page. The genuine login never asks for the recovery words. If the layout is subtly off, or a field you do not recognise appears, close the tab and come back through a verified address. The cost of checking is nothing. The cost of skipping it is the account.