Please remember: The only website authorized to obtain your ORCID username and password is orcid.org, which will show clearly in address bar with a security lock icon whenever you are asked to enter your ORCID credentials.
You should never provide your ORCID username or password to a website if the address bar is different than orcid.org, and you should not share these credentials with anyone else.
For additional protection, we recommend that you turn on two factor authentication for your ORCID account - more details can be found here.