Let's start with the clear conclusion: Set up your anti-phishing code first, then configure Passkey later. The anti-phishing code is your unique credential to verify if official OKX messages are real, while Passkey is a shortcut to make daily login easier. Setup priority is based on necessity, not convenience.
Why This Setup Order Is Recommended
Passkey only solves the problem of login convenience, while the anti-phishing code solves the critical problem of confirming if the message you receive is legitimate. Without Passkey, you can still log in with your regular password. But without an anti-phishing code, you can't even tell official OKX emails apart from scam emails, which leads to far more severe security risks.
Additionally, OKX's Passkey feature has a pre-requirement: you must complete identity verification, email verification, and phone verification first before you can bind a Passkey. That means you cannot skip basic security settings to enable Passkey directly.
Step 1: Set Up Anti-Phishing Code First (Top Priority)
[What it does] Bind a unique custom identification code to your account, to help you confirm that all emails and notifications sent by OKX are official. [How to set it up] Open the OKX App → Tap the profile avatar at the top left → Go to Security Settings → Find the "Anti-Phishing Code" option → Enter 6-8 memorable characters (combination of letters and numbers) and save your settings. [Completion check] When you receive an official OKX email, your custom code will be displayed in the email body. Treat any email that does not show this exclusive code as a phishing scam immediately.
Step 2: Decide Whether to Enable Passkey Later
[What it does] Set up Passkey as a fast login method to simplify your daily access to OKX. [How to set it up] Go to Security Settings → "Passkey" → Enable the feature, then follow the on-screen prompts to finish device verification. One OKX account can bind up to 10 Passkeys. [Completion check] You can log in directly with your Face ID or fingerprint, no need to enter your password and verification code every time.
Risk Warning: Passkeys are tied to your specific devices. If you do not sync your Passkey via iCloud or Google Password Manager when you change to a new phone, it may stop working. Many users have reported that their Passkey failed to work after switching to a new device and needed to be re-bound. We recommend you confirm your Passkey backup status before changing phones, or delete the old Passkey in your Security Settings and set up a new one after switching devices.
Common Setup Failure Causes
- You never checked your OKX emails to confirm the anti-phishing code after setup, so you ignored the missing code in phishing emails and got scammed.
- You enabled Passkey but changed to a new phone, and found it cannot be used on the new device because you did not authorize sync on your old phone.
- Your Passkey is bound to iCloud, but you logged in with a different Apple ID on your new phone, leading to sync failure.
Next Steps
Go to Security Settings right now to set up your anti-phishing code first, then decide if you want to enable Passkey based on your usage needs. If you want to use Passkey but are not sure if your old device can sync it, go to the Passkey management page first to check the status of your current bound devices. If you still have your old phone, follow the prompts to scan the code and sync when you switch to the new device. If your old device is no longer available, delete the old Passkey first then bind a new one.
