Yes, you can use both. In OKX's security system, passkey and authenticator app are two equal but complementary two-factor authentication (2FA) methods, not an either-or replacement. You can turn both on and assign them to different actions. For example, you can use a passkey with face recognition for login, and require a 6-digit code from Google Authenticator for withdrawals.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
Can They Be Enabled at the Same Time? What That Means
OKX's custom two-factor authentication policy lets you freely combine multiple verification methods. Go to User Center → Security Settings → Security Center, and you can manage all enabled verification methods there.
If Passkey and Authenticator App both show as "Enabled," it means both are active in your account security policy. A common setup: use a passkey for login (through biometrics or PIN) and require an authenticator app 6-digit code plus email verification for key actions like withdrawals or P2P trading. These two methods do not conflict and can coexist in the same account security policy.
Risk Comparison: They Protect Against Different Things
OKX's official documentation has compared these two verification methods. The core difference is the attack surface.
| Comparison | Passkey | Authenticator App (Google/Microsoft Authenticator) |
|---|---|---|
| Technology | Public-key encryption based on the FIDO protocol; the private key is stored locally on your device | Time-based one-time password (TOTP); the seed is stored on the device |
| Anti-phishing | Strong; tied to a specific domain, so phishing sites cannot use it | Weak; if you enter the code on a phishing site, it may be stolen |
| SIM swap protection | Strong; not related to your phone number | Not affected either, but the authenticator itself does not rely on your phone number |
| Main attack surface | Device is physically obtained and unlocked | Seed is stolen by malware, or a cloud account (such as a Google account) is hacked and synced authenticator data is leaked |
| Device replacement cost | Low; supports cross-device sync through iCloud or Google Password Manager | Medium; you need to manually migrate the seed or restore from a cloud backup |
Differences to Keep in Mind
The "cannot delete" last lock: OKX's security policy requires your account to keep at least one passkey. If you want to delete the last passkey, the system only allows "reset," not direct deletion. Authenticator app does not have this limitation.
Passkey has separate sub-systems: OKX has several relatively independent passkey systems:
Exchange Passkey: used to log in to the main platform and verify trading
DEX trading wallet Passkey: derived from the Exchange Passkey authorization and used for decentralized trading scenarios
Pay Passkey: used for OKX Pay smart contract wallet signatures. It is a separate system from Exchange Passkey and must be created separately.
If you have already set up an Exchange Passkey and want to use DEX features, you need to authorize it again on the DEX page. Pay Passkey is completely independent and must be created again.
Practical Tips for Daily Use
Enable passkey as your main verification method first. It is more phishing-resistant than SMS and email verification, and you don't need to open an app and copy a code each time. OKX's official documentation also lists passkey as the "most secure account protection option."
Keep an authenticator app as a backup or supplement. If you only enable passkey and lose your device or biometrics fail, account recovery will be difficult. Keeping an authenticator app as a fallback is safer. Note: after changing your authenticator app, withdrawals will be disabled for 24 hours.
Don't rely too heavily on one verification method. In OKX's Security Center, you can view and manage all bound verification methods. Regularly checking connected devices and passkey list is a good habit — if you see a passkey you did not create, reset it immediately.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
How to Check If Both Are Enabled
In the OKX App, go to User Center → Security Settings → Security Center → Passkey, and scroll down to the identity verification methods area. If passkey shows "Enabled" and the authenticator app binding status also looks normal, it means both verification methods are enabled at the same time.
