Secure the accounts around your crypto
Why email, passwords, 2-step verification, withdrawal controls, and devices matter before any wallet advice.
Key takeaway
An exchange account is only as resilient as its email recovery, authentication method, connected devices, and support process.
Start with the email account
Email often controls password resets and security notifications. Use a unique password, enable strong 2-step verification, review recovery options, and remove devices or forwarding rules you do not recognise.
A separate email address for financial accounts can reduce exposure, but it does not help if it reuses passwords or has weak recovery settings.
Use stronger authentication
Prefer a passkey, hardware security key, or authenticator app when the service supports it. SMS codes are better than a password alone but can be exposed through number takeover and social engineering.
Store backup codes offline and know the official recovery process before you replace or lose a phone.
Turn on movement controls
Use withdrawal address allowlists, new-address delays, anti-phishing codes, and login alerts where available. These controls can create time to notice an account takeover before assets leave.
Review active sessions, API keys, connected applications, and authorised devices. Remove anything you no longer use or cannot identify.
Bookmark support before an emergency
Save the exchange's official website and support route. Search advertising and social replies can place impersonators above legitimate help when you are already under pressure.
If an unexpected caller knows account details, that proves information was available to them; it does not prove they work for the company. End the call and contact support independently.
Practical checklist
Before you move on
- ✓Use unique passwords generated by a password manager
- ✓Enable the strongest available 2-step verification
- ✓Protect and test account-recovery methods
- ✓Turn on withdrawal allowlists and alerts
- ✓Remove unused sessions, API keys, and devices
- ✓Bookmark the official support page
Check the source
Authoritative material used to verify the safety guidance in this article.