How to reset security settings after suspicious login on Binance?

Immediate Account Lockdown Protocol

1. Log in to Binance via official website or verified mobile app using your registered credentials.

2. Navigate to Security Center → Account Activity and review all recent login attempts, including timestamps, IP addresses, and device types.

3. Click “Lock Account” located at the top of the activity log — this instantly disables all active sessions except the current one.

4. Confirm lockdown by entering your current password and completing SMS or email verification sent to your verified contact channels.

5. Do not proceed to any other security configuration until the lock is confirmed active and all unauthorized sessions show status “Terminated”.

Two-Factor Authentication Reset Pathway

1. Within the same Security Center, locate Two-Factor Authentication (2FA) section and select Google Authenticator.

2. Click “Reset 2FA” and choose the recovery method: backup codes, verified email, or registered phone number — only one valid channel is required.

3. Enter the six-digit code received via your selected recovery channel and wait for system confirmation that old TOTP bindings are purged.

4. Re-scan the new QR code with Google Authenticator on a trusted device; ensure time synchronization is verified before final submission.

5. Save the newly generated 16-character backup key and eight-digit recovery codes in an encrypted offline location — never store them in cloud notes or messaging apps.

Withdrawal Address Whitelist Enforcement

1. Go to Wallet → Withdrawal Settings and toggle Whitelist Mode to “Enabled”.

2. Delete all previously saved withdrawal addresses — each removal requires re-entry of your current password and 2FA code.

3. Add only new, pre-verified external wallet addresses; each addition triggers a mandatory 24-hour cool-down period before first use.

4. During the cool-down, verify ownership by sending a test transaction of 0.001 BTC or equivalent stablecoin to the newly whitelisted address.

5. Confirm successful receipt on-chain via block explorer before initiating any substantial withdrawal from Binance.

Email and Phone Verification Reinforcement

1. In Security Center, access Contact Information and initiate re-verification for both email and phone number.

2. For email: click “Resend Verification Link”, open inbox associated with the address, and click the unique tokenized URL within 10 minutes.

3. For phone: request a new SMS code, enter the six-digit number, then immediately disable SMS-based 2FA if previously enabled — replace it with authenticator-only mode.

4. Ensure no secondary or forwarding email accounts are linked; only primary domains with MX records under your direct administrative control should remain active.

5. Disable any third-party email forwarding rules or auto-forwarding filters that could expose verification tokens to external servers.

Anti-Phishing Code Reconfiguration

1. Locate Anti-Phishing Code under Security Features and click “Change Code”.

2. Input a new 6-character alphanumeric string containing at least two uppercase letters, one digit, and zero repeating characters.

3. Submit the change and wait five minutes before triggering any outbound notification — such as changing API keys or updating KYC documents.

4. Open your verified email inbox and locate the next automated message from no-reply@binance.com; confirm the new anti-phishing suffix appears at the end of the subject line.

5. Repeat this verification step for every additional email address bound to the account — each must display its own unique anti-phishing tag in all official correspondence.

Frequently Asked Questions

Q1: Can I reset my Binance security settings without accessing my original phone?Yes — provided your registered email remains accessible and you have previously saved backup codes or completed KYC verification. Email-based recovery bypasses SMS dependency entirely.

Q2: Why does Binance require a 24-hour cooldown after adding a new withdrawal address?This delay prevents immediate exploitation by attackers who gain temporary access. It enforces a physical or procedural verification window where ownership must be demonstrated off-chain.

Q3: What happens if I lose both my Google Authenticator and backup codes?You must submit identity documentation through Binance’s official support portal. Video identity verification becomes mandatory, and processing takes up to 72 business hours.

Q4: Is it safe to reuse the same anti-phishing code across multiple cryptocurrency platforms?No — doing so defeats the purpose. Each platform must have a distinct, non-repeating code. Reuse enables cross-platform phishing correlation and increases credential exposure risk.