Security

Security overview

Work through each security check and close the gaps. Full protection means all of them are done.

Security score—

Enabled—

To do—

PasswordSetSet

Changing your password signs out every other deviceChange →

Email verification——

Your registration email, used for password recovery and security alertsResolve →

Phone verification——

Used for sign-in alerts and identity checks after an emergency freezeResolve →

Two-step verification (2FA)——

Worth 40 points of your security score — the single most valuable itemEnable →

Withdrawal whitelist——

Withdrawals only to whitelisted addresses, so nothing leaves even if you're compromisedSet up →

How a real account takeover unfolds3 steps

① Your email password leaked on another site (credential stuffing)
② The attacker uses the same credentials to sign in here
③ Withdraw to your own address immediately — the whole thing takes under 3 minutes

With 2FA on, step ② breaksRequired