Guide
SMS, authenticator app, passkey or security key: which second factor to use
Four options, ranked by what each one actually resists, and why the strongest is not always the right first move.
Custodial accounts.
Permissions, not promises.
Every exchange account has security settings that decide who can sign in, what can leave, and who gets told. These guides go through them one by one, and cover what to do when something goes wrong.
Open the guidesReferral code
Registering with the code adds nothing to what the exchange charges you, and can take up to 20% off your trading fees.*
* The rate that actually applies is whatever the exchange shows on its own page when you register, and it can be changed by them at any time.
Before you open an account
One piece here follows a single exchange end to end: the sign-up form, identity checks, and the security settings that are far less painful to configure while the balance is still zero. If you have not opened an account yet, read that one first and come back to the rest.
Already have an account? Skip this one and start with the eight settings.Editor's note, September 2026
Scope
Coins on an exchange sit in the exchange's wallets.
What you control is who it lets sign in as you.
So the guides here stay on the settings page: who can sign in, what can leave the account, where it is allowed to go, and what to do when one of those fails.
I. Securing your account, before the money arrives
The long one. Start here if you are setting up.
Eight settings, in the order they actually matter, and the two that people switch on and then quietly regret.
Guide
Four options, ranked by what each one actually resists, and why the strongest is not always the right first move.
Guide
The migration order that works, and what to do if the old phone is already gone.
Guide
A backup that lives in the same place as the thing it backs up is not a backup.
Guide
The feature that stops a thief also stops you. Whether that trade is worth it depends on how you use the account.
Guide
Read, trade, withdraw, IP restriction. What each one hands over if the key leaks.
Guide
Sessions, devices and activity records are the only part of the account that tells you something happened.
Guide
The full sign-up sequence on one exchange, with the security settings done in the gap before any money moves.
II. Scam emails, fake support calls and SIM swaps
Guide
A short string in your exchange's genuine emails. Useful, narrow, and widely misread as protection against everything.
Guide
Sender domain, the link under the link, and the one question that settles it without clicking anything.
Guide
The scripts are stable because they work. Once you can name the opening, the rest of the call is predictable.
Guide
What a phone number can still unlock, how the takeover is done, and the settings that stop it working.
III. If your account is hacked or frozen
Guide
Branching on what you still control, because the right first move is different if the email is gone.
Guide
The code is spent. What it authorised decides the next ten minutes: a login, a withdrawal, or an address quietly added to the list.
Guide
Restrictions are not always punishment. What you send back decides how long it lasts.
Guide
Recovery offers arrive because the first loss is public. The second one is usually larger.
Working tools
Tool
Answer what is currently switched on; it returns the gaps and the order to close them.
Tool
An unexpected call, email or text claiming to be an exchange. Work down the branches.
Tool
Builds an ordered plan from what you still have access to.
All tools
What you select stays in your browser; the logic is in the page.
Official pages we read
All sources| Type | Title | Read | Publisher |
|---|---|---|---|
| HELP PAGE | What is an anti-phishing code and how to set it up | Sep 2026 | Binance support centre |
| HELP PAGE | How to manage withdrawal settings for my account | Sep 2026 | Binance support centre |
| HELP PAGE | How to use BAuthenticator for two-factor authentication | Sep 2026 | Binance support centre |
| SIGN-UP PAGE | Account registration form, as shown to a new visitor | Sep 2026 | Binance |
Where a page has since been rewritten, the entry here is what we read on the date shown, not a claim about today.