# Security & 2FA
Your account security matters.
Enable 2FA (two-step verification)
1. Account > Security > Enable 2FA 2. Scan the QR code with Google Authenticator (or any TOTP app) 3. Enter the 6-digit code to confirm 4. Save your 8 recovery codes somewhere safeFrom now on, logins need your password plus a fresh code. Withdrawals always require 2FA.
Account safety tips
- Use a unique password of 10+ characters
- Never share recovery codes or passwords with anyone
- Review active sessions in Account > Security; revoke anything unfamiliar