How to recover a forgotten Fund Password on OKX? (Security reset)

Understanding Fund Password Security on OKX

1. The fund password on OKX is a separate security layer from the login password, designed specifically to authorize withdrawals, transfers, and sensitive asset operations.

2. It is never stored in plain text by OKX and cannot be retrieved or viewed by users or support staff after creation.

3. Unlike standard account passwords, the fund password does not support direct reset via email or SMS due to its elevated security role in protecting digital assets.

4. Attempting repeated incorrect entries triggers temporary lockouts to prevent brute-force attacks on this critical credential.

5. Users are explicitly prompted during onboarding to record their fund password offline—OKX does not provide a recovery phrase or backup mechanism for it.

Required Identity Verification Steps

1. Access the OKX app or website and navigate to Security Center > Account Security > Fund Password.

2. Select “Reset Fund Password” and confirm initiation of the verification flow.

3. Upload a clear, unaltered photo of a government-issued ID (passport, national ID card, or driver’s license) showing full name, date of birth, and expiry date.

4. Complete real-time facial verification using device camera—live blinking detection and liveness checks are enforced.

5. Submit a signed handwritten statement on white paper declaring intent to reset the fund password, including full legal name, registered OKX UID, and current date.

Asset Freeze and Withdrawal Restrictions During Reset

1. Upon submission of identity documents, all withdrawal functions across spot, futures, margin, and cross-wallet accounts are automatically suspended.

2. Deposit capabilities remain fully operational—funds can still be received into the account without restriction.

3. Trading on perpetual swaps and options markets continues uninterrupted as long as margin positions are maintained within required thresholds.

4. Any pending withdrawal requests submitted prior to reset initiation are canceled immediately and cannot be reinstated.

5. The freeze remains active until final approval is issued by OKX’s dedicated security review team, typically within 72 business hours.

Post-Approval Fund Password Reconfiguration

1. After successful verification, users receive an in-app notification with a time-limited link to set a new fund password.

2. The new password must contain at least eight characters, including uppercase letters, lowercase letters, numbers, and one special symbol.

3. Copy-paste functionality is disabled during input to prevent accidental exposure via clipboard loggers.

4. A mandatory two-factor authentication (2FA) check via authenticator app or hardware key is required before final submission.

5. A confirmation email containing the timestamp, IP address, and device fingerprint of the reset action is sent to the verified primary email address.

Frequently Asked Questions

Q: Can I reset my fund password using only Google Authenticator or SMS?No. 2FA methods alone are insufficient. Full KYC-level identity verification is mandatory for any fund password reset.

Q: What happens if my ID document is rejected during review?ID rejection occurs due to glare, cropped edges, expired validity, or mismatched names. Resubmission is permitted once per 24-hour window with corrected documentation.

Q: Is there a way to bypass the 72-hour freeze period?No exceptions exist. The freeze duration is non-negotiable and enforced system-wide to mitigate social engineering and unauthorized access attempts.

Q: Will my API keys remain active during the reset process?Yes. API key permissions stay unchanged unless manually revoked. However, any API call requiring fund password authorization (e.g., withdraw endpoint) will return error code 403 until reset completion.