Crypto account security checklist: 7 steps in 15 minutes
Short answer
Protect your email first, because it can reset everything else: turn on Google 2-Step Verification with an authenticator app or a passkey. Then turn on 2FA, an anti-phishing code and a withdrawal allowlist on your exchange.
- Prefer an authenticator app or a passkey to text messages.
- Never share a code. Real support never asks for one.
Our only official accounts
- Bot @FairRebateBot: the only way to reach us
- Channel @FairRebate: updates only
We will never
- message you first
- ask you to transfer money or pay an "unlock fee"
- ask for your password, codes, private keys or seed phrase
Secure your email
In your Google Account, go to Security and turn on 2-Step Verification. Choose an authenticator app or a passkey: text messages are the weakest option.
Save your backup codes
Create backup codes in the same place and write them on paper.
Turn on 2FA on your exchange
Use an authenticator app or a passkey, and write the setup key on paper too.
Set an anti-phishing code
Real emails from the exchange will show your code, so fakes stand out.
Turn on the withdrawal allowlist
Crypto can then only go to addresses you’ve approved.
Use a different password everywhere
A password manager makes this easy.
Check your devices every month
Sign out anything you don’t recognise, then change your password.
Never share these
- Passwords and verification codes
- Backup codes, recovery phrases and private keys
- Your screen, with anyone claiming to be support
FAQ
Is text-message (SMS) verification good enough?
It's the weakest option. Scammers can get your number moved to their SIM card. Use an authenticator app or a passkey where you can.
I lost the phone with my authenticator app. What now?
Sign in with the backup codes or setup key you wrote down, then set up 2FA on your new phone. Without them, use the official account recovery on Google's or the exchange's own site.
Someone says they're support and asks for a code. Should I give it?
No. It's a scam. Stop replying and block them.