Always ensure you're on the official Ledger website before entering your credentials. Ledger will never ask for your 24-word recovery phrase.