How to Complete Security Initialization After Registering an OKX Account via QR Code Scan?
Scanning the QR code to register is only the first step; your account remains in a "bare" state. Before you can truly start trading, you must complete KYC identity verification, bind two-factor authentication (2FA), and set a separate trading password. Only after completing these three steps is security initialization finished.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
Prerequisites
You have already registered through the OKX official website or app by scanning the QR code, received the verification code, and successfully logged into your account.
Prepare a valid identity document (ID card or passport), a mobile phone number registered in your real name, and an email address that can receive messages. Unverified accounts cannot buy/sell crypto, deposit/withdraw, borrow, or transfer funds.
Steps
Step 1: Complete Identity Verification (KYC)
After successfully registering via QR code, the first thing is not to deposit funds, but to complete identity verification.
On the App: Tap the user center icon at the top left of the home screen, tap the nickname/account at the top, and go to [Identity Verification].
Submit Documents: Tap [Verify Now] and follow the prompts to upload front and back photos of your ID card or the information page of your passport. Ensure the document photos are clear, unobstructed, and all four corners are fully visible.
Facial Recognition: Complete liveness detection as prompted. Face the screen directly, with sufficient lighting, and do not wear a hat or sunglasses.
(Optional) Video Verification: For higher permissions, go to [Buy Crypto] - [C2C Buy] - [My] - [Video Verification] and record a video as guided by the system (typically the system reads a risk disclaimer, and you just need to answer "Yes" after the beep).
When is it complete?: The verification page shows "Under Review" or "Verified". Review is usually completed automatically within 5 minutes, and no later than 24 hours for complex cases.
Step 2: Bind Two-Factor Authentication (2FA) – The Most Critical Line of Defense
This is the core measure to protect your account from unauthorized access. We strongly recommend using Google Authenticator, which is more secure than SMS verification.
Enter Security Settings: Tap User Center - [Security Settings].
Enable 2FA: Find [Authenticator App] (i.e., Google Authenticator) and tap Enable.
Scan to Bind: Use the Google Authenticator app to scan the QR code displayed on the page, or manually enter the key.
Enter Dynamic Code: Enter the 6-digit dynamic password from Google Authenticator and tap confirm to complete the binding.
Crucial Step: After binding, the system will provide a set of backup recovery codes. These codes are used to regain account access if you lose your phone and cannot open Google Authenticator. Immediately take a screenshot and save it in a secure place; do not store it on internet-connected devices. We recommend handwriting it or saving it in a password manager.
When is it complete?: The "Authenticator App" status on the security settings page shows as Enabled.
Step 3: Set a Separate Trading Password
The login password is for accessing your account, while the trading password is used for high-risk operations like withdrawals and placing orders. The two must be different.
In [Security Settings], find [Trading Password] and tap Set.
Follow the prompts to enter a 6-digit or alphanumeric password (specific rules depend on the app prompt).
After confirming the password, the system will ask you to enter an SMS or Google Authenticator code for verification.
When is it complete?: The trading password has been successfully set.
Common Failure Reasons and Risk Reminders
Common Failure: Verification Photos Rejected Due to Non-standard Format. Many people casually snap a blurry photo of their ID and submit it, leading to failure. The correct way is: place the document flat, ensure even lighting, have all four corners fully in frame, and avoid reflections. If facial recognition fails, check whether your face is obstructed or the ambient light is too dim.
Risk Reminder: Leaking Backup Recovery Codes Equals Losing Account Control. Google Authenticator's backup recovery codes are the only credentials to reset 2FA. If someone else obtains these codes, they effectively take over your account. Absolutely never send these codes to anyone via WeChat, QQ, or email.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
How to Confirm You Have Completed Security Initialization
Log in to the OKX app and go to [User Center] - [Security Settings]. Check whether all three of the following items show as "Enabled" or "Bound":
| Security Item | What to Check |
|---|---|
| Identity Verification | Shows "Verified" or "Passed" |
| Authenticator App (Google Authenticator) | Shows "Bound" |
| Trading Password | Shows "Set" |
Once all three are completed, your account has basic trading and deposit/withdrawal permissions. The next step is to go to the [Buy Crypto] page to bind your payment method (bank card / Alipay / WeChat) or transfer stablecoins into your account to start trading.
