SECURE YOUR BINANCE ACCOUNT

Protect the exchange account that protects your crypto.

Binance accounts can provide access to trading, deposits, withdrawals, P2P transactions and other crypto services. Protect the account before focusing on convenience.

Start with account access, then protect withdrawals.

A compromised exchange account can expose funds quickly. Start with your password, 2FA and authorized devices, then protect withdrawal addresses and connected applications.

Crypto transactions can be difficult or impossible to reverse. Always verify the recipient, network and amountbefore approving a transaction.

What should I never share?
Never give anyone your Binance password, 2FA code, API secret, recovery information or other authentication credentials. Binance support should not require you to reveal these secrets.
Why is email security important for Binance?
Binance uses email for important account and withdrawal security processes. If someone controls your email account, they may be in a stronger position to interfere with security confirmations. Protect your email account with the same seriousness as your Binance account.
What if someone says they can recover my crypto?
Be extremely cautious. Never send crypto, passwords, private keys or recovery information to someone claiming they can recover your funds. Use Binance's official support channels instead.
BINANCE ACCOUNT SECURITY

Protect access, withdrawals and connected services.

Work through these checks one at a time. After each important change, use the VERIFY section to confirm that the protection is actually active.

Use a strong, unique password

Your Binance password protects access to your exchange account and the assets connected to it.

Click to see protection steps

Step-by-step

  1. Sign in to your Binance account.
  2. Open your profile and go to Security.
  3. Find the option to change your password.
  4. Create a strong password that you do not use on another account.
  5. Avoid passwords based on your name, birthday, phone number or other easily guessed information.
  6. Store the password securely, preferably in a reputable password manager.
  7. Never give your Binance password to another person.

VERIFY: Confirm that the new password has been accepted and that you can sign in normally with it.

Enable strong two-factor authentication

2FA adds another verification layer when you sign in or perform sensitive actions. Binance supports several 2FA methods.

Click to see protection steps

Step-by-step

  1. Open your Binance Security settings.
  2. Find Two-factor authentication.
  3. Review the available authentication methods.
  4. Prefer an authenticator app or compatible hardware security key where available.
  5. Follow Binance's instructions to connect your chosen authentication method.
  6. Complete the required verification code or security-key confirmation.
  7. If Binance provides a backup or recovery key, store it somewhere secure and separate from your normal login credentials.

VERIFY: Return to Security and confirm that your chosen 2FA method is enabled.

Consider a hardware security key

A physical security key provides strong protection against many remote phishing attacks because the attacker normally needs the physical key.

Click to see protection steps

Step-by-step

  1. Open your Binance Security settings.
  2. Find the available security key or authentication-key option.
  3. Connect a compatible U2F/FIDO security key.
  4. Follow the on-screen instructions.
  5. Touch or activate the security key when prompted.
  6. Give the registered key a recognizable name if Binance allows you to label it.
  7. If you use a security key as an important recovery method, consider keeping a second trusted key in a secure location.

VERIFY: Confirm that the security key appears as a registered authentication method and that you recognize it.

Set an anti-phishing code

Binance's anti-phishing code helps you distinguish genuine Binance communications from fake messages pretending to be Binance.

Click to see protection steps

Step-by-step

  1. Open your Binance Security settings.
  2. Find Anti-Phishing Code.
  3. Choose the option to set your anti-phishing code.
  4. Create a unique code that is difficult for another person to guess.
  5. Do not use your password, PIN or other security secretas the code.
  6. Confirm the change using your configured authentication method.
  7. Remember that the code is meant to help you recognize legitimate Binance communications.

VERIFY: Check a genuine Binance security communication and confirm that it contains the anti-phishing code you configured.

Review authorized devices and account activity

Regularly reviewing devices and recent activity can help you detect unauthorized access before it becomes a larger problem.

Click to see protection steps

Step-by-step

  1. Open your Binance Security settings.
  2. Find Device Management or the available device and activity section.
  3. Review the devices currently authorized to access your account.
  4. Review recent login activity, IP addresses and timestampswhere Binance provides them.
  5. Investigate anything you do not recognize.
  6. Remove or sign out an unrecognized device.
  7. If you believe the account has been compromised, secure the account immediately rather than continuing normal trading activity.

VERIFY: Confirm that every authorized device and recent login activity belongs to you.

Enable withdrawal address whitelisting

Withdrawal address whitelisting restricts outgoing crypto transfers to addresses you have approved.

Click to see protection steps

Step-by-step

  1. Open your Binance Security settings.
  2. Find Withdrawal Whitelist or the available Address Management settings.
  3. Enable the withdrawal address whitelist if it suits the way you use Binance.
  4. Add only wallet addresses that you have independently verified.
  5. Give each approved address a recognizable label.
  6. Confirm the address and network carefully before approving it.
  7. Remember that adding an address may involve asecurity waiting period before it can be used.

VERIFY: Review the whitelist and confirm that every approved withdrawal address belongs to a wallet or destination you intentionally added.

Verify the network before withdrawing crypto

Choosing the wrong blockchain network can result in funds being sent incorrectly or becoming difficult or impossible to recover.

Click to see protection steps

Step-by-step

  1. Open Assets and choose the crypto you intend to withdraw.
  2. Select Withdraw.
  3. Enter or paste the recipient's wallet address.
  4. Check the network selected by Binance.
  5. Confirm that the receiving wallet supports that exact network.
  6. Compare the first and last characters of the destination address with the address you intended to use.
  7. Check the amount, network and destination again before submitting the withdrawal.
  8. Never rely only on an address copied from an unexpected message.

VERIFY: Before confirming a withdrawal, independently verify the recipient, network and amount.

Protect your withdrawal addresses

A crypto address is not enough by itself. You also need to verify the network, recipient and intended transaction before approving a transfer.

Click to see protection steps

Step-by-step

  1. Save frequently used addresses only after independently verifying them.
  2. Use a clear address label so you know exactly who or what the address belongs to.
  3. Do not change a saved address because someone sends you a message claiming the old address is no longer valid.
  4. When adding a new address, verify it through a trusted independent channel.
  5. If Binance provides a security delay for a new withdrawal address, treat that delay as a protection rather than trying to bypass it.
  6. Review your withdrawal whitelist periodically.

VERIFY: Confirm that each saved withdrawal address is still correct, necessary and controlled by the intended recipient.

Secure Binance API keys

API keys can give applications access to your Binance account. Give them only the permissions they actually need.

Click to see protection steps

Step-by-step

  1. Open API Management in your Binance account.
  2. Review all existing API keys.
  3. Identify keys you no longer use.
  4. Delete or disable unnecessary keys.
  5. Give each remaining key the minimum permissionsrequired for its purpose.
  6. Avoid enabling withdrawal permissions unless they are genuinely necessary.
  7. Use IP restrictions for API keys where your setup supports a stable trusted IP address.
  8. Never publish API keys or secret keys in source code, screenshots, messages or public repositories.

VERIFY: Confirm that every active API key has a legitimate purpose, minimum permissions and appropriate access restrictions.

Protect P2P transactions

P2P transactions introduce additional social-engineering and payment risks, so verify the counterparty and payment evidence carefully.

Click to see protection steps

Step-by-step

  1. Use Binance's official P2P marketplace rather than moving the transaction to an unknown platform because someone asks you to.
  2. Review the counterparty's profile, completion information and transaction history where Binance displays them.
  3. Keep communication within the appropriate Binance P2P process.
  4. Never release crypto simply because someone sends you a screenshot claiming that payment was completed.
  5. Confirm the actual payment in your own bank or payment account.
  6. Do not allow another person to pressure you into releasing assets before you have independently confirmed the payment.

VERIFY: Release crypto only after you independently confirm the actual payment in the receiving account.

Recognize Binance phishing

Attackers may impersonate Binance through email, SMS, social media, fake websites and fake support accounts.

Click to see protection steps

Step-by-step

  1. Do not click an unexpected Binance login link.
  2. Open Binance through your saved bookmark or another trusted route.
  3. Check the website address carefully before entering credentials.
  4. Look for your configured anti-phishing code in genuine Binance communications.
  5. Never give anyone your password, 2FA code, API secret or recovery information.
  6. Be suspicious of anyone promising to recover lost crypto or asking you to transfer assets to a supposed secure wallet.
  7. Treat urgent requests involving withdrawals or account verification as suspicious until independently verified.

VERIFY: Before entering credentials or approving a transaction, independently confirm that you are using Binance's legitimate service.

Secure your account after suspicious activity

If you discover an unfamiliar device, login, API key, withdrawal address or other warning sign, treat the account as potentially compromised.

Click to see protection steps

Step-by-step

  1. Stop approving withdrawals or security changes.
  2. Open Binance directly and go to Security.
  3. Review authorized devices and recent account activity.
  4. Remove unfamiliar devices.
  5. Review and revoke unfamiliar API keys.
  6. Review withdrawal addresses and whitelist settings.
  7. Change your password.
  8. Review and strengthen your 2FA.
  9. Check your email account because email access may be involved in Binance security confirmations.
  10. If funds have moved without your authorization, preserve transaction information and contact Binance through its official support process.

VERIFY: Do not resume normal trading or withdrawals until your devices, password, 2FA, API keys and withdrawal settings are under your control.

Something does not look right?

If you find an unfamiliar login, changed recovery information, unexpected security alerts or another sign that someone may have accessed your account, stop the normal security check and move to the recovery process.

I think my account is compromised →
Still need help?

If you have worked through the relevant settings and something still looks wrong, do not give your security secrets to someone promising to fix the account. Use the service's official support and recovery resources for service-specific account problems.

For broader cybersecurity problems, you can also use the professional assistance pathway on this platform.

Need Professional Help? →
Binance security is not a one-time task.

Review important account settings periodically, especially after a password change, device change, suspicious message or unexpected login alert.

VERIFY BEFORE YOU TRUST.

← Back to Secure Your Accounts