Exchange-account security
Exchange security combines account hygiene with platform and custody risk. Strong authentication can reduce account takeover, but it cannot eliminate exchange insolvency, operational failure, or withdrawal restrictions.
In this guide
Protect the account
Use a unique password, phishing-resistant authentication where supported, device review, withdrawal allowlists, and verified bookmarks.
Treat email and mobile-number security as part of the same threat model because they often control account recovery.
Limit platform exposure
Keep only operational capital on a venue, understand legal entity and custody terms, and test withdrawal procedures before an emergency.
Proof-of-reserves information can be useful but may not show all liabilities or legal claims.
Frequently asked questions
Does 2FA make an exchange balance safe?⌄
It helps prevent account takeover but does not remove platform or custody risk.
Is SMS 2FA enough?⌄
It is better than no second factor, but authenticator apps or security keys are generally more resistant to SIM-swap attacks.
Review risk disclosures →