A Basic Guide to Securing Your Personal Binance Account
This course covers practical measures for protecting your account, including passwords, authentication, devices and withdrawal permissions, phishing, and API management. The focus is on reducing the risks of credential leakage and unauthorized access, and promptly restricting account activity when anomalies are detected.
Passwords and two-factor authentication
Set unique, strong passwords for different accounts. Passwords should preferably be more than characters long and combine uppercase and lowercase letters, numbers, and special characters. You can use a trusted password manager to store passwords while also protecting the associated email account. After enabling two-factor authentication (2FA), you will need a second form of verification in addition to your password; when using an authenticator, keep the reset key safe.
Check devices and account activity
Regularly review the devices approved to access your account in Device Management, and remove unfamiliar or no-longer-used devices. Also check login IP addresses and times to identify unusual activity. If you notice clear signs of suspicion, you can immediately disable the account to suspend trading and withdrawals, delete API keys, and remove authorized devices, then investigate the security of your password and email.
Restrict withdrawal and API permissions
The Address Management feature can restrict fund withdrawals to pre-confirmed wallet addresses; newly added addresses must be confirmed by email before they can be added to the whitelist, so the email account itself must also be rigorously protected. When using Binance API, grant permissions only to necessary external applications, set a IP whitelist, and regularly update your API keys to reduce the risk after a key leak.
Identify phishing and use hardware authentication
Phishing often uses fake corporate websites or emails to steal account information. When accessing websites, use trusted bookmarks that you saved yourself, and verify notification emails using the anti-phishing code. You can also enable universal second factor (U2F) authentication: when logging in, you must connect or wirelessly pair a compatible hardware device, making it more difficult for attackers to remotely take over the account.
Original Tutorial
https://www.binance.com/zh-CN/academy/articles/secure-your-binance-account-in-7-simple-steps