How to enable Two-Factor Authentication on OKX? (Account security)

Accessing Security Settings

1. Log in to your OKX account using your registered email or phone number and password.

2. Navigate to the top-right corner of the OKX interface and click on your profile icon.

3. From the dropdown menu, select Security Center.

4. Ensure you are on the Account Security tab within the Security Center.

5. Locate the Two-Factor Authentication (2FA) section and click Enable.

Setting Up Google Authenticator

1. Choose Google Authenticator as your preferred 2FA method.

2. Scan the QR code displayed on screen using the Google Authenticator app installed on your mobile device.

3. If scanning fails, manually enter the secret key provided under the QR code into the app.

4. Enter the six-digit code generated by Google Authenticator into the OKX verification field.

5. Click Confirm to bind the authenticator to your account.

Binding a Backup Email or Phone Number

1. After enabling Google Authenticator, OKX prompts you to add a backup verification method.

2. Select either Email or SMS as your secondary recovery option.

3. Enter your verified email address or mobile number associated with your OKX account.

4. Complete the email or SMS verification by entering the one-time code sent to that channel.

5. Confirm the binding by clicking Save — this step is mandatory before finalizing 2FA activation.

Managing Recovery Options

1. Within the Security Center, locate the Recovery Options subsection.

2. Download and securely store the 2FA backup codes provided by OKX — each code can be used only once.

3. Verify that your recovery email or phone number remains active and accessible.

4. Avoid sharing or storing backup codes in cloud services or unencrypted devices.

5. Revisit this section periodically to ensure all contact details remain up to date.

Frequently Asked Questions

Q: What happens if I lose access to my Google Authenticator app?A: You can use one of your downloaded 2FA backup codes to log in and reconfigure authentication. If no backup codes remain, you must initiate OKX’s account recovery process via your verified email or phone number.

Q: Can I enable both Google Authenticator and SMS 2FA simultaneously?A: OKX allows only one primary 2FA method at a time. SMS serves as a fallback for account recovery, not concurrent authentication.

Q: Why does OKX require email or phone verification before completing 2FA setup?A: This ensures an alternative verification path exists in case the primary authenticator becomes inaccessible, reducing the risk of permanent account lockout.

Q: Is it possible to disable 2FA after enabling it?A: Yes — but OKX enforces a 24-hour waiting period after initiating the disable request, and you must verify identity through both your current 2FA code and a backup method.