Set up two-step sign-in (2FA)

Two-step sign-in (2FA) means you sign in with your password plus a 6-digit code from an app on your phone. The code changes every 30 seconds and works even when your phone is offline. A stolen password alone is then not enough to get in. To turn it on, go to Settings, the Security tab, scan the QR code with an authenticator app, type the code it shows, and save your 10 recovery codes.

Turn it on

1. 1Install an authenticator app if you do not have one. Google Authenticator, Microsoft Authenticator, Authy and 1Password all work.
2. 2Open Settings, then the Security tab, and press Set up 2FA.
3. 3Open the app, choose to add an account and scan the square. No camera? Type the set-up key instead. Press I scanned it.
4. 4Type the code the app shows and press Verify and turn on. 2FA only turns on after this step works, so you cannot lock yourself out halfway. If the code fails, wait for the next one.
5. 5Save the 10 one-time recovery codes (Copy all or Download .txt), tick the box that says you saved them, and press Done. Each code works once.

Remember this device

When you sign in, you can tick Remember this device for 30 days. On that device, you will not be asked for a code again for 30 days. You can forget a device at any time under Remembered devices in Settings, Security. Use this on your own computer only, not a shared one. Changing your password or moving to a new phone forgets all of them.

When you need 2FA

2FA is optional for a normal account. You must turn it on before you can do any of these:

• Link an account as a guarded link, the one that uses your master password and lets FxMind act on trades
• Change what FxMind may do on an account (the guard action policy)
• Set referral payout details
• Create API keys

When you are asked for a code again

With 2FA on, FxMind asks for a code before important steps, even on a remembered device:

• Changing your sign-in email
• Deleting the account
• Turning 2FA off (you also type your password)
• Asking for a referral payout or changing the payout wallet
• Making an API key

Lost phone

Sign in with your password and one of your recovery codes. Then set up 2FA again on the new phone: in Settings, Security, press Move to a new phone. If you have no codes left, contact support. We check that it is really you, and access comes back after a wait of at least 24 hours. It is never instant. The wait makes sure only the real owner gets back in. More about how we protect accounts is on the security page.