Support will never ask for a full password, private key, one-time password or complete payment-card number. Use secure delivery methods for credentials and report suspicious requests through a new ticket.