Most crypto that users lose is not stolen by hacking an exchange but through stolen passwords, fake e-mails and fake support agents. A few settings take five minutes and close most of these doors. You will find them all in the security section of your account settings.
1. Use a strong, unique password
Use a password you do not use anywhere else, at least 8 characters long; a long passphrase kept in a password manager is better still. If another site you use is hacked, a reused password is the first thing attackers try.
2. Turn on two-factor authentication (2FA)
With 2FA, signing in needs a one-time code from an authenticator app on your phone in addition to your password. Even if someone learns your password, they cannot log in without your phone.
- Install an authenticator app such as Google Authenticator or Microsoft Authenticator.
- Open the security section of your account settings and enable two-factor authentication.
- Scan the QR code with the app and enter the 6-digit code to confirm.
3. Set an anti-phishing code
The anti-phishing code is a short word of 4–20 letters or digits that you choose yourself. Once it is set, it appears at the top of every e-mail Akunosai sends you. An e-mail that looks like it comes from Akunosai but does not show your code is fake: do not click its links.
4. Turn on the withdrawal address whitelist
With the whitelist on, crypto can be withdrawn only to addresses you have saved in advance. Even someone who gets into your account cannot send your coins to a new address. For each saved address you can add a label, the network and a memo or tag.
- Security changes need your account password.
- Turning the whitelist off pauses withdrawals and transfers for 24 hours.
- Check every address you save twice: withdrawals to a wrong address cannot be reversed.
5. Check your login history
The login history lists your latest sign-ins with the device, IP address and country. If you see one that was not you, change your password at once and enable 2FA.
Built-in protection on Akunosai
- You are notified in the app and by e-mail about every security change.
- After a password reset, after turning 2FA off and after turning the whitelist off, withdrawals are paused for 24 hours.
- Every withdrawal goes through a security review before it is sent on-chain.
Scams to watch out for
- Never share your password, 2FA code or e-mail codes with anyone, including people who say they are support staff.
- Contact support only through the support page on akunosai.com, not through private messages.
- Check the address bar: the official site is akunosai.com. Download the app only from akunosai.com or Uptodown.
- In P2P trades, never release coins before the payment has really arrived. See how to trade P2P safely.
- Be wary of anyone who promises guaranteed profits or asks you to send crypto to "unlock" a withdrawal.
FAQ
Q: I lost the phone with my authenticator app. What now? A: Contact support and describe the problem. Never send your password to anyone.
Q: Why are my withdrawals paused? A: Withdrawals pause for 24 hours after a password reset, after turning 2FA off or after turning the whitelist off. This gives you time to react if someone else made the change.
Q: Can I get 2FA codes by SMS? A: Two-factor authentication on Akunosai uses an authenticator app. App codes are safer than SMS because they cannot be taken over with a SIM swap.
Q: Should I keep the anti-phishing code secret? A: Yes. It only works as a check while scammers do not know it.
Not registered yet? Create an account and switch these settings on before your first deposit.