Black Ops Market addresses
All three open the same market. Copy one into the Tor Browser address bar.
The account is worth protecting
A market account holds a wallet, an order history, and a reputation you built one closed order at a time. Protecting it takes about ten minutes of setup and then a few habits. Most losses happen in the first ten minutes, not after a year of careful use.
The email
Register with an address you created for this. Not your main inbox: recovery flows land there, and a shared inbox means a shared account. Not a brand-new throwaway you will not check: then the recovery email arrives and dies. A quiet dedicated address you glance at weekly is the right object.
The password
Long, and used nowhere else. If your bank password, your forum password and your market password are the same string, one breach opens all three doors. A phrase of four or five random words is easy to type (which matters, because fat-fingered passwords look like "wrong password" to the market) and hard to guess. Write the phrase on paper, keep the paper somewhere physical, and do not screenshot it into your phone gallery.
Two-factor
Turn on 2FA after registering and before your first meaningful deposit, not after. Use an authenticator app that generates codes locally. SMS codes travel through networks you do not control, and a SIM swap is a two-call affair. If the market shows you a separate switch for withdrawal confirmation, turn that on too: a password compromise then gives someone your listings but not your balance.
Support never asks. Market support, in the market, will never ask for your password or your current 2FA code. A ticket reply that wants them is not support, no matter how official the ticket looks.
While you browse
Log out and close the tab on any machine you do not keep. On a fresh circuit per session costs you a minute and means your browsing does not sit on one long-lived route. And when a login attempt fails, do not hammer it: several failures in a row can lock the login for a while, which turns a typo into an afternoon. Fix the obvious things first, they are usually keyboard layout or a stale password manager fill, then try once.