How to Enable Two-Factor Authentication on OKX

Accessing Security Settings

1. Log in to your OKX account via the official website or mobile application.

2. Navigate to the top-right corner and click on your profile icon.

3. Select Settings from the dropdown menu.

4. In the left-hand sidebar, choose Security Center.

5. Scroll down to locate the Two-Factor Authentication (2FA) section.

Enabling Google Authenticator

1. Click Enable next to Google Authenticator.

2. A QR code and a manual setup key will appear on screen.

3. Open your authenticator app—such as Google Authenticator, Authy, or Microsoft Authenticator—and scan the QR code.

4. If scanning fails, manually enter the setup key into the app.

5. Enter the six-digit code generated by the app into the OKX verification field and click Confirm.

Configuring SMS Verification as Backup

1. Under the same Two-Factor Authentication section, locate SMS Verification.

2. Click Enable and enter your verified phone number.

3. OKX will send a one-time verification code via SMS.

4. Input the received code and confirm to activate SMS as a secondary recovery method.

5. Note that SMS 2FA is less secure than authenticator-based 2FA due to SIM swap vulnerabilities.

Securing API Keys with 2FA

1. Go to API Management under the Account tab.

2. When creating a new API key, ensure Enable 2FA for this key is toggled on.

3. Assign granular permissions—such as Trade, Withdrawal, or Transfer—based on operational necessity.

4. Bind the API key to a specific IP address whitelist if applicable.

5. Store the Secret Key and Passphrase offline; never expose them in client-side code or logs.

Recovery and Emergency Protocols

1. After enabling 2FA, OKX provides a set of recovery codes—download and store them securely in an encrypted offline location.

2. If you lose access to your authenticator device, use one of the recovery codes to log in and reconfigure 2FA.

3. SMS-based recovery requires prior activation and successful identity verification through OKX’s KYC process.

4. Hardware wallet users must not confuse device-level PINs with OKX account 2FA—they operate independently.

5. Any attempt to disable 2FA triggers a mandatory 24-hour cooling-off period before finalization.

Frequently Asked Questions

Q: Can I use multiple authenticator apps simultaneously for OKX 2FA?Yes. You may scan the same QR code with more than one authenticator app. All will generate identical time-based codes.

Q: What happens if my phone is lost and I haven’t saved recovery codes?You must initiate OKX’s account recovery process, which includes submitting verified identification documents and answering security questions tied to your KYC submission.

Q: Does enabling 2FA affect API call frequency limits?No. Rate limits remain unchanged at 20 requests per second per API key, regardless of 2FA status.

Q: Is it possible to enable 2FA only for withdrawals while disabling it for trading?No. OKX applies 2FA uniformly across all sensitive operations once activated. Granular per-action enforcement is not supported.