A FranceConnect session is safer when it begins on the correct service and a device you control. This checklist covers the whole procedure: preparing documents, authentication, data sharing and signing out.
Quick answer
An adviser or helper can explain the screens, but should not request your password or authentication code. Keep control of secret entry and final approval.
Why this trap works
Administrative procedures often involve several accounts, sensitive evidence and temporary codes. The risk is not limited to a fake page: a shared computer, public network, forgotten file or reused password can also expose information.
The safest method is to slow down, leave the channel creating pressure and return through a known source. An independent check usually takes far less time than recovering an account or disputing a payment.
Step-by-step checks
-
Update the device and browser before an important procedure.
-
Avoid public computers. On a shared network, prefer your mobile connection or a trusted network.
-
Prepare the required documents and hide unrelated information when the process allows it.
-
Open the public service from a reliable bookmark or official portal, then choose FranceConnect from that page.
-
Use a unique identity-provider password and never disclose a temporary code.
-
Read which data the service requests before confirming.
-
Upload evidence only in the designated area and avoid insecure messaging channels.
-
Keep the receipt in protected storage and note the stated deadline.
-
Sign out of both sessions afterwards, especially on a shared device.
-
Review every login alert and secure the account immediately when it does not match your action.
The point people miss
An adviser or helper can explain the screens, but should not request your password or authentication code. Keep control of secret entry and final approval.
Do not decide from one signal alone. A padlock, logo, sender name or top search position can all be copied. Combine the address, context, request and an official channel found independently.
What to do after a click, entry or payment
For an error, use the service’s secure mailbox or official help to correct the case. If an unfamiliar login is reported, change the identity-provider password, review sessions and follow FranceConnect’s dedicated security flow.
Act first on what can still be blocked: a session, password, card or payment. Document the incident afterwards. Do not delete messages or logs before preserving useful evidence.
Frequently asked questions
Is FranceConnect+ required for every procedure?
No. Some sensitive services request it, but the choice depends on the required identity-assurance level.
Can someone help without knowing my password?
Yes. A helper can guide the screen while you enter secrets yourself.
Should I leave supporting files on the desktop?
No. Move them to protected storage and remove copies left on a shared device.
Official sources and update policy
This article prioritizes public or institutional sources. Interfaces and procedures can change, so verify the relevant service’s current instructions before a sensitive action.
What FranceConnect changes — and what it does not
FranceConnect reduces the need to create a separate username for each participating service, but it does not remove the need to inspect the service you are entering. The identity provider confirms who you are; the destination service remains responsible for the procedure and its decision. Read the destination name and the information requested before approving the exchange.
A login alert is useful only when it is reviewed. Keep notifications enabled, compare the time and service with your own action, and respond through official help when something is unfamiliar. Never let a caller turn an alert into a request for a password, one-time code or money transfer.