How to Protect Your Binance Account From Hacking: Security Settings to Safeguard Your Crypto
To protect your Binance account from hacking, a strong password alone is not enough. Set up a passkey or authenticator-based two-factor authentication (2FA), enable an anti-phishing code, and restrict withdrawals with an address whitelist. Protecting your linked email account and phone matters just as much.
π Key takeaways
Use a long, unique password that you do not reuse elsewhere.
Enable passkeys or authenticator-app-based two-factor authentication.
Create an anti-phishing code to help spot suspicious messages.
Restrict withdrawals to approved wallet addresses.
Regularly review sign-in activity, connected devices, and API keys.
π Start with your password and two-factor authentication
After signing in, open your profile, select Account, and visit Security. Choose a password that is unique to Binance and consider storing it in a reputable password manager.
Two-factor authentication adds another verification step if someone learns your password. Passkeys and authenticator apps are generally preferable to relying solely on text messages. If you use an authenticator app, keep its recovery method secure in case you lose your phone.
π‘οΈ How do you set up a passkey?
A passkey allows you to verify your identity using a supported device and its screen-lock mechanism. On Binance, go to Account β Security β Passkeys to register a compatible device.
Binance also offers an option to require passkey verification for important actions. Before enabling it, confirm you can reliably access your passkey and understand the recovery implications: losing access may prevent you from signing in.
π© Use an anti-phishing code to recognize suspicious messages
An anti-phishing code is a distinctive code you choose to appear in genuine Binance emails and text messages.
In Security, find Anti-Phishing Code and create your code. Binanceβs published instructions specify 6β8 characters using at least three categories among uppercase letters, lowercase letters, digits, and underscores.
Treat a missing or incorrect code as a warning. Even a message displaying your code is not a reason to trust every link: open the Binance app directly rather than following unexpected links in messages.
π° Limit withdrawals with an address whitelist
A withdrawal whitelist restricts transfers to wallet addresses you have approved in advance. This creates a barrier if someone gains access to your account.
On the website, open your profile β Settings β Withdrawal, enable Withdrawal Whitelist, and register your destinations through Address Management.
Consider enabling the additional waiting period for withdrawals to newly added addresses. Check both the asset and blockchain network carefully when adding an address; a security setting cannot correct a transfer sent on the wrong network.
π Review sessions, devices, and API permissions
Check your accountβs login activity and connected devices. Unknown sign-ins or devices you no longer use deserve immediate attention.
Also review API keys that grant access to trading tools or third-party services. Delete unused keys and apply the minimum permissions needed. Be especially cautious with permissions affecting trading and withdrawals.
π¨ What if you suspect your account has been compromised?
If you receive an unexpected login prompt, verification request, or withdrawal alert, do not click the messageβs links.
From a trusted device, open Binance directly and review account activity. Where possible, change your password, terminate suspicious sessions, and secure the email account linked to Binance.
If you discover unauthorized withdrawals or cannot access your account, contact Binance through its official support channel immediately to request appropriate protective measures. Never give verification codes, passwords, or recovery phrases to someone claiming to be support.
β Your first action today
Open the Binance app, go to Account β Security, and check whether a passkey or authenticator-based 2FA is enabled. That single check is a practical starting point for stronger account security.