# Set up Two-Factor Authentication (2FA)

We strongly encourage you to enable 2FA. We offer two methods to protect your valuable assets and information:

* **Using an Authenticator App**
* **Using a Passkey**

And we support 2FA in the following situations:

* **Login**
* **Withdrawal**
* **When attempting to change personal information**

This ensures that your assets remain secure at all times.

<figure><img src="https://2260387934-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FMxPfaVCLU0Czhjxw23iD%2Fuploads%2FAaWOjI6LLGllDRS8nYDd%2F2FA-b.png?alt=media&#x26;token=40a323be-1d6e-4e87-b15c-872e1d37b399" alt=""><figcaption></figcaption></figure>

## 1. Authenticator App

* **How It Works**: You use an app (like Google Authenticator or Authy) to generate a time-based one-time password (TOTP) or a code. This code is used alongside your password to log in.
* **Features**:
  * **Dynamic Codes**: Generates a new code every 30 seconds, adding a time-based element to security.
  * **Offline Access**: Works without an internet connection once set up.
  * **Convenience**: Often integrated into mobile devices, making it easy to access codes.
  * **Secure**: Codes are generated locally on your device, reducing the risk of interception.

## 2. Passkey

* **How It Works**: Passkeys are cryptographic keys stored on your device and used for authentication. They provide a secure way to log in without entering a password.
* **Features**:
  * **Passwordless**: Eliminates the need for passwords, reducing the risk of password theft.
  * **Enhanced Security**: Uses strong cryptographic methods, making it more resistant to phishing and other attacks.
  * **Convenience**: Simplifies the login process by using biometric or device-based authentication (like Face ID or fingerprint recognition).
  * **Device-Specific**: Passkeys are typically stored and used on a specific device, adding an extra layer of security.

Each method offers a unique approach to enhancing security, with Authenticator apps relying on time-based codes and Passkeys leveraging cryptographic methods for a more seamless and secure login experience.

{% hint style="warning" %}
For your security, withdrawals are restricted for 12 hours after enabling a new Authenticator app or Passkey.
{% endhint %}
