Security & Wallets2026.09.26

Security Checklist: Your First Hour After Signing Up

Two-factor auth, withdrawal allowlists, and an anti-phishing code stop most attacks.

  1. Use an authenticator app rather than SMS for two-factor authentication.
  2. Set a withdrawal address allowlist and enable the change cooling-off period.
  3. Configure an anti-phishing code so you can recognise genuine emails.
  4. Give the account its own email address and a unique password.