Exchange-account security
Exchange security combines account hygiene with platform and custody risk. Strong authentication reduces account-takeover risk. Exchange solvency, operations and withdrawal access require separate assessment.
Protect the account
Use a unique password, phishing-resistant authentication where supported, device review, withdrawal allowlists, and verified bookmarks.
Treat email and mobile-number security as part of the same threat model because they often control account recovery.
Limit platform exposure
Keep only operational capital on a venue, understand legal entity and custody terms, and test withdrawal procedures before an emergency.
Proof-of-reserves information can be useful but may not show all liabilities or legal claims.
Frequently asked questions
Does 2FA make an exchange balance safe?⌄
It helps prevent account takeover; platform and custody risks require separate controls.
Is SMS 2FA enough?⌄
It is better than no second factor, but authenticator apps or security keys are generally more resistant to SIM-swap attacks.
Review risk disclosures →