We prioritize and invest heavily in security. However, don’t let this put your own guard down. No amount of security on our end can make up for inadequate personal security.

It is vital for clients to take advantage of the account security tools and advice that we offer and to never share access to the account with anyone else.

Securing your Sign-In

• Never allow anyone to create or manage an account on your behalf.
• Choose a Username that is hard to guess and not used on any other website. Never share your username with anyone.
• Create a Password that is long (at least 10 characters) and that is not used on any other website.
• Set up Sign-In 2FA, this is the most important security feature.Warning about authenticator apps that use cloud storage: If their cloud storage is hacked, it can compromise your Sign-In 2FA.
• Beware of phishing scams. Even Sign-In 2FA can't protect your account if you enter it on a phishing website or share it with a scammer.
• Only use official mobile apps. Third-party mobile apps using names or asking for your credentials are a form of phishing.
• Use API keys with caution. Sharing your API private key or QR code is the same as sharing your account password!

Securing your Email

If the email account registered to your account is compromised, it can be used to request your username, reset your password, and approve withdrawals.

• Create a Password using the same tips as for your password, but make the email password different.
• Set up Sign-In 2FA just as you would for your account, and don't use the SMS option if your email provider offers it.
• Remove your phone numbers from your email account.
• Check your settings and activity. See our securing your email account guide for more details.

Securing your Internet

A compromised internet connection can steal your sign-in details and direct you to phishing sites. Here are some ways you can secure your internet connection:

• Router password. Change the default password on your home internet router. Keeping the default password will allow any stranger from the internet to gain control over your router. To prevent brute force attacks, use a long phrase (rather than a single word) along with numbers and symbols.
• WiFi password. Make sure your WiFi network is password protected. This is separate from the router password.
• Guest network. Create a guest network if your router has that option and keep the main network private for your devices only.
• Avoid public WiFi. Use your mobile data plan instead. If you have to use public WiFi, make sure to have a reputable VPN (avoid free VPNs).

Securing your Devices

A compromised device can log everything you type into it, and mobile devices are the most common way to use Two Factor Authentication (2FA).

• Device password. Create a secure passphrase and use fingerprint sign-in if possible. Avoid easy to guess pins and sign-in patterns.
• Don’t share your device. Don’t get guilted by friends and family to share access and passwords to your devices, especially if you use those devices for your 2FA.
• Never give remote access. Some customer service teams will request remote access to your computer to help troubleshoot technical issues, but this is very dangerous and it is also the favorite technique of scammers. So always say ‘No’ to applications such as RemotePC, TeamViewer, and GoToMyPC. Support will never ask you to install remote access software!
• Avoid public devices. Only sign in from your personal devices.
• Avoid work devices for personal accounts. They are able to monitor and record your activity.