Two-factor authentication (2FA) is the single most effective way to protect your exchange account. Even if someone steals your password, they cannot log in or withdraw without the second code. An authenticator app is safer than SMS, which can be hijacked through SIM-swap attacks.
Before you start
Install an authenticator app such as Google Authenticator, Microsoft Authenticator or another reputable TOTP app on your phone.
Set up authenticator 2FA in the OKX app
- Open the OKX app and go to your profile.
- Open Security (sometimes under Settings).
- Choose Authenticator app and start the setup.
- OKX shows a QR code and a setup key. Write the setup key on paper and store it somewhere safe and offline.
- In your authenticator app, add a new account by scanning the QR code or entering the key.
- Type the 6-digit code from the authenticator app into OKX, plus any email or SMS codes requested, then confirm.
Best practices
- Keep the backup setup key offline. Do not save it as a screenshot or in cloud notes.
- Never share a 2FA code with anyone. Codes are only typed into the official OKX app or website.
- Also set an anti-phishing code and a withdrawal address whitelist for extra protection.
Lost your phone?
If you saved the setup key, add it to an authenticator app on your new phone and your codes will work again. If you did not, use the account recovery or 2FA reset option in OKX, which requires identity verification and can take time. That is why the paper backup matters.