A walkthrough of the security settings in the OKX app for new users

Sign-up flows are designed to get you trading quickly, which means many protective features are optional and easy to skip. Weeks later, plenty of users still rely on a password and SMS code alone, even though the app offers much stronger options. Taking twenty minutes to work through the security menu makes your account considerably harder to compromise, and most settings only need to be configured once. This walkthrough goes through the main controls in the OKX app in a practical order: first how you sign in, then how you recognise genuine messages, then how withdrawals are protected and finally which devices can access the account. Menu names change from time to time, so use the official help centre if a label differs from what you see.

Strengthen how you sign in

Start with your password. If it is used anywhere else, replace it with a long, unique one stored in a password manager. Next, add an authenticator app or a passkey as your second factor. SMS codes are better than nothing, but phone numbers can be hijacked through SIM swaps. When you set up the authenticator, write the setup key or backup codes on paper and keep them separate from your phone. Test that the new method works by signing out and back in before you remove any older option.

Set an anti-phishing code

The anti-phishing code is a word or phrase you choose that appears in genuine emails from OKX. Once it is set, any message claiming to be from the platform without your code should be treated as suspicious. Pick something memorable but not obvious, and do not share it. This simple step helps you dismiss convincing fake emails about suspended accounts or urgent verification, which are among the most common phishing tactics. Remember that the code only protects you if you actually look for it before clicking anything in an email.

Protect withdrawals

Look for withdrawal-related settings such as an address allowlist, which restricts withdrawals to addresses you have saved in advance. Adding a new address may require extra verification and can trigger a waiting period, which is exactly the point: it gives you time to react if someone else gains access. Review the saved address book and remove entries you no longer use. If you create API keys for tools, keep withdrawal permission switched off unless there is a compelling reason, and delete keys you no longer need.

Review devices and alerts regularly

The app shows which devices have signed in to your account. Go through the list and remove any you no longer use, such as an old phone or a shared computer. If you see something you do not recognise, change your password immediately and review your second factor. Make sure login and withdrawal notifications are enabled and reach an email address you check daily. Set a monthly reminder to repeat this review; it takes only a few minutes once your settings are in place.

Risk boundary: OKX App Safety Guide

Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.

Scenario checkpoint

• Replace any reused password with a unique one and add an authenticator app or passkey as your second factor.
• Write the authenticator setup key or backup codes on paper and store them away from your phone.
• Set an anti-phishing code and check for it before clicking anything in an email claiming to be from OKX.
• Enable the withdrawal address allowlist and remove saved addresses or API keys you no longer use.
• Review signed-in devices monthly and make sure login and withdrawal alerts reach an inbox you check daily.