Binance account security starts with a unique password, multi-factor authentication, trusted devices, and controlled withdrawal and API settings. Review the account centre directly instead of treating an email or message as proof that a request is genuine.
Controls to enable
- Use a unique password and a current authenticator or passkey.
- Review login alerts, active sessions, and unknown devices.
- Use withdrawal-address controls and verify the network before sending funds.
- Create API keys only when needed and restrict permissions and IP access.
- Keep the registered email and phone secure and recoverable.
If an alert is unfamiliar
Open Binance through the official website or app, change the password, revoke unknown sessions and API keys, and contact official Support. Never share a password, seed phrase, or one-time code.
For related steps, see the password guide, the anti-phishing guide, and the notification guide. The current Binance entry is retained from the API record.
