What's the Difference Between Binance Withdrawal Protection and Address Whitelist?
Withdrawal Protection is a "time lock"; Address Whitelist is an "access card". The former blocks all withdrawals for a specific period, while the latter only allows funds to flow to pre-approved addresses. They solve security issues in completely different scenarios.
The world's largest cryptocurrency exchange by trading volume,leading in security and liquidity.
New user benefit: Enjoy 20% off trading fees upon registration!
Each Handles One Thing, Each Guards Against One Threat
Address Whitelist (Withdrawal Whitelist): Restricts fund withdrawals to external addresses you have added and approved in advance. If a hacker gets your password and 2FA but the withdrawal destination address is not on the whitelist, the withdrawal will be directly rejected. After adding a new whitelist address, there is usually a 24-hour withdrawal cooling-off period, providing an extra security buffer.
Withdrawal Protection (Withdraw Protection): Blocks all on-chain withdrawals during a set lock period (1 to 7 days, 48 hours by default). It is not designed to guard against hackers stealing your account, but against physical coercion – such as the "wrench attack" where someone forces you to make a transfer in person. When strict mode is enabled, even you cannot lift the lock early during the lock period.
How They Divide the Work
| Dimension | Address Whitelist | Withdrawal Protection |
|---|---|---|
| What It Guards Against | Remote hacker account theft | Physical coercion, remote control |
| How It Works | Restricts withdrawals to specific addresses | Blocks all withdrawals for a fixed time window |
| Can It Be Bypassed? | Addresses can be added/deleted with proper permissions | In strict mode, the lock cannot be lifted early during the lock period |
| Best Use Case | Everyday withdrawal security | Emergency "safety pause" |
In Practice: How to Use Both Together
It is recommended to enable both – they do not conflict.
Steps to set up Address Whitelist:
Log in to the Binance website (whitelist setup is currently only supported on the web version). Go to [Profile] – [Security] – [Address Management].
Click [Add Withdrawal Address], select the coin and network, enter your external wallet address, confirm it is correct and save.
Turn on the [Allow Withdrawals Only to Whitelist Addresses] switch. A new address will have a 24-hour withdrawal lock period during which you cannot withdraw to that address.
How to know you're done: The whitelist switch is on, and there is at least one approved external address.
Steps to set up Withdrawal Protection:
Log in to the Binance App (iOS version 16.0 or above required) or the web interface.
Go to [Account Center] – [Account Information] – [Security] – [Withdrawal Protection].
Set the lock period (1 to 7 days, 48 hours by default) and choose whether to allow early unlocking.
In strict mode, no one (including yourself) can withdraw during the lock period.
How to know you're done: Withdrawal Protection is enabled, and the page displays the lock period end time.
Common Misconceptions and Risk Reminders
Common misconception: thinking the whitelist can prevent a "wrench attack"
The whitelist cannot prevent face-to-face coercion – an attacker can force you to add a new address on the spot and then wait 24 hours to drain the funds. Withdrawal Protection is specifically designed for this scenario: even if a new address is added, funds cannot be moved during the lock period.
Common misconception: thinking Withdrawal Protection can prevent hackers
Withdrawal Protection addresses physical coercion, not a replacement for 2FA or the whitelist. For dealing with remote hackers, the whitelist is more direct and effective – even if a hacker gets your password, they cannot withdraw to an unlisted address.
New addresses have a 24-hour cooling-off period
This is a critical security mechanism of the whitelist. If you need to quickly withdraw to a new address in an emergency, this 24-hour period will become an obstacle. It is recommended to add your frequently used wallet addresses in advance – don't wait until you urgently need funds to remember to add them.
The world's largest cryptocurrency exchange by trading volume,leading in security and liquidity.
New user benefit: Enjoy 20% off trading fees upon registration!
How to Confirm You've Set Everything Up Correctly
Log in to the Binance App or website, go to the [Security Settings] page, and check the following two statuses:
Withdrawal Protection: Shows as enabled, and you can see the current lock period time range.
Address Whitelist: Shows as enabled, and the list of added withdrawal addresses includes your frequently used external wallet addresses.
Once both are confirmed, your account has dual-layer withdrawal protection – a "pre-authorised gate" plus an "in-event time lock". If you genuinely need to withdraw during the lock period, you can first check the lock period end time in the settings, or verify whether the "allow early unlock" function is enabled.
