Security Level Checklist
| Security Measure | Importance | Time Required |
|---|---|---|
| Enable Google Authenticator 2FA | ⭐⭐⭐⭐⭐ Mandatory | 5 minutes |
| Set Anti-Phishing Code | ⭐⭐⭐⭐⭐ Mandatory | 2 minutes |
| Bind Phone Number | ⭐⭐⭐⭐ Highly Recommended | 2 minutes |
| Set Strong Password | ⭐⭐⭐⭐⭐ Mandatory | 1 minute |
| Enable Withdrawal Whitelist | ⭐⭐⭐⭐ Mandatory for Large Amounts | 5 minutes |
| Regularly Check Login History | ⭐⭐⭐ Recommended | 1 minute/week |
Mandatory: Enable Withdrawal Whitelist
The withdrawal whitelist is an advanced security feature. Once enabled, withdrawals are only allowed to addresses on the whitelist. Even if your account is compromised, attackers cannot withdraw your funds.
- Go to "Security" → "Withdrawal Whitelist"
- Enable the whitelist feature
- Add your frequently used withdrawal addresses
- New addresses require a 24-hour wait before withdrawals are allowed (to prevent attackers from adding them temporarily)
Daily Security Habits
Login Habits
- Only log in on the official website
binance.com, do not click any redirect links - Bookmark the Binance URL in your browser and always access it via the bookmark
- Do not operate your account on public WiFi
- Regularly check "Account Activity" and change your password immediately if you see unfamiliar logins
Password Management
- Use a password manager (1Password, Bitwarden) to generate and store strong passwords
- Do not reuse your Binance password on other platforms
- Change your password every 3-6 months
What to Do If You Notice Account Anomalies?
- Log in to Binance immediately, go to "Security" → "Device Management", and remove all unfamiliar devices
- Change your password immediately
- Reset Google Authenticator
- Contact Binance customer support to freeze your account
- Check for any unauthorized withdrawal requests and cancel them immediately
Identifying Common Scams
- Fake Customer Support: Someone contacts you claiming there is an issue with your account and asks for your password or 2FA code
- Phishing Emails: Emails disguised as official Binance communications with links to fake websites
- Fake Airdrops: Claims that you have received an airdrop and need to connect your wallet or enter your seed phrase
- Investment Scams: Claims of insider information or high-yield projects requiring you to transfer funds