FAQ · Security

OKX Security

Asset safety mechanisms, two-factor authentication and account risk control with step-by-step answers.

Q1How does OKX protect assets?+
1
Cold and hot wallet separation

OKX stores most user assets in offline cold wallets, with only a small amount for daily withdrawals in hot wallets, reducing theft risk.

2
Multi-signature mechanism

Cold wallet transfers require multiple authorized signatures, preventing asset movement even if a single step is compromised.

3
Proof of reserves

OKX regularly publishes proof of reserves (PoR), disclosing on-chain assets and user liabilities to achieve transparent 1:1 coverage.

4
Real-time risk control

The platform runs a real-time risk engine that monitors and blocks abnormal logins and large transfers, detecting threats early.

5
Two-factor protection

Users can enable Google Authenticator, SMS or email verification for extra checks on login and withdrawals.

6
Audits and protection fund

OKX conducts ongoing third-party security audits and maintains a risk protection fund, adding multiple layers of protection.

Q2How do I set up two-factor authentication?+
1
Enter the security center

Log in to OKX and go to "Profile" or "Security Settings" to find the two-factor authentication entry.

2
Choose a method

Support Google Authenticator, SMS and email. Google Authenticator is recommended for higher security.

3
Bind Google Authenticator

Download the Google Authenticator app, scan the QR code or enter the key provided by OKX to generate dynamic codes.

4
Verify the binding

Enter the current dynamic code to confirm the binding. Once successful, two-factor protection is enabled.

5
Save the backup key

Record and store the backup key offline, so you can restore access when changing phones or reinstalling the app.

6
Verification takes effect

Sensitive operations like login and withdrawal now require dynamic codes, significantly improving account security.

Q3What if my OKX account is compromised?+
1
Freeze the account immediately

Contact OKX support right away to request a temporary account freeze, preventing further unauthorized operations.

2
Change your password

Change your login password in a secure environment, using a brand-new strong password not reused from other platforms.

3
Check login devices

Review recent login device records in security settings, remove unknown devices and force logout from other sessions.

4
Reset two-factor authentication

If 2FA was tampered with, contact support to reset it and rebind your own Google Authenticator or other methods.

5
Contact platform support

Explain the situation to OKX support with proof of identity. The platform will help investigate and take security measures.

6
Strengthen future protection

Enable all available security checks, review account activity regularly, and beware of phishing links and fake websites.

Download OKX to Protect Your Assets

Download the OKX App with cold/hot wallet separation, multi-signature and 1:1 proof of reserves.

Download Now