Protect the account itself
Use an account-specific password and add an email address you or the responsible parent controls. Roblox warns that passwords, browser cookies, verification codes and recovery codes must remain private. A helper who asks for those details is asking for access to the account.
Set up a second verification method
In account settings, open Security and follow the current two-step-verification setup for an offered method. Roblox requires a verified email for this setup. Store backup codes securely, and review the current recovery requirements instead of relying on only one device.
Before leaving a shared device
- Sign out when finished.
- Do not leave account or recovery information visible during a screen share.
- Reject an unexpected sign-in approval and review the account through Roblox’s own settings.