Recommended Free Tools
Enable at least one two-factor authentication (2FA) method on Binance.US before you trade or hold funds. After signing in, open Security, find the 2-Factor Authentication (2FA) controls, and set up SMS Authentication, Google Authenticator, or both. Binance.US recommends an authenticator app for most users, while SMS is required during new-account registration and can be changed or supplemented later.
Binance.US describes 2FA as “a second layer of security beyond your password.” It helps protect an account when a password is exposed, but it does not make phishing-safe habits, a private password, device security, or withdrawal controls optional.
As an Amazon Associate I earn from qualifying purchases.
What Binance.US requires
Every Binance.US customer must have at least one 2FA method enabled. The account’s Security page presents two documented setup choices:
| Method | How it works | When it is available |
|---|---|---|
| SMS Authentication | A one-time code is sent to the phone number linked to the account. | Required during new-account registration; it can be changed or joined by another method after registration. |
| Google Authenticator | A compatible app generates six-digit time-based one-time passwords (TOTP) from a 16-digit binding key. | Available from the Security page after signing in; Binance.US recommends this method. |
Binance.US says the Google Authenticator option can work with many apps that generate six-digit TOTP codes and use a 16-digit key. Its examples include Authy, Okta Verify, Microsoft Authenticator, Duo, and 2FAS. That does not establish support for every authenticator app or every hardware security key.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
The exact prompts can change. Depending on your account and the current interface, Binance.US may ask for your password, an SMS code, an authenticator code, an email confirmation, or an identity check.
Prepare before changing 2FA
- Open the genuine sign-in page at https://www.binance.us/login. Check the address bar before entering your password or a 2FA code; phishing pages often use a slightly different domain or URL.
- Have access to the phone number currently attached to the account if you are adding, replacing, or removing SMS authentication.
- If you are using an authenticator app, install a compatible six-digit TOTP app and keep the phone’s date, time, and time zone set automatically. Accurate time is required for time-based codes.
- Use a strong password that you do not reuse elsewhere. Binance.US representatives will not ask for your password or 2FA codes.
- Plan how you will retain access if your phone is lost. Keep any setup information shown by the authenticator enrollment in a private, protected place; never send it to support or another person.
Enable 2FA on an existing Binance.US account
- Go directly to https://www.binance.us/login and sign in.
- Open Security from the account interface.
- Locate the 2-Factor Authentication (2FA) section. Choose SMS Authentication or Google Authenticator.
- Follow the verification prompts displayed by Binance.US. The current flow may request your password, a code sent by SMS or email, an authenticator code, or an identity confirmation.
- Complete the final confirmation and return to Security to verify that the selected method is shown as enabled.
During registration, SMS 2FA is required. Once the account exists, you can change that method or add another one. Enabling more than one method is practical when you can keep both recovery paths secure; Binance.US specifically recommends using more than one method when possible.
Set up SMS Authentication
Choose SMS Authentication in Security, confirm the phone number shown, and submit the code sent to that number. If Binance.US asks for an existing 2FA challenge or email confirmation, complete it in the same session. Verify that the number is yours and is not shared with another Binance.US account, because a number already linked elsewhere can prevent code delivery.
SMS is convenient when you routinely have cellular service. It is also the method most affected by a lost number, a carrier outage, roaming limitations, or a phone-number takeover. Treat an unexpected request to move your number or disclose a code as a security incident.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Set up Google Authenticator or a compatible TOTP app
- In Security, select Google Authenticator.
- Open Google Authenticator or another app that supports six-digit TOTP codes and a 16-digit key.
- Use the enrollment details displayed by Binance.US to bind the app to the account. Keep the 16-digit key private; anyone who obtains it may be able to generate the same codes.
- Enter the current six-digit code from the app when Binance.US requests it.
- Finish any password, SMS, email, or identity checks shown by the interface, then confirm that authenticator-based 2FA is enabled.
TOTP codes are generated on the device rather than delivered by text message, so an enrolled app can normally produce a code without a cellular signal. The code is time-sensitive; a phone whose clock is wrong can produce a number Binance.US rejects.
SMS versus an authenticator app
Neither method should be treated as universally best for every account. Choose based on the recovery access you can protect and the places from which you sign in.
| Consideration | SMS Authentication | Authenticator app |
|---|---|---|
| Dependence on cellular service | Requires the linked phone number to receive a text message. | Generates a code in the app; cellular service is not needed after enrollment, although the phone must be available and its clock must be accurate. |
| Travel | Can be difficult when roaming, outside supported regions, or unable to receive texts. | Useful while traveling because the app can generate TOTP codes offline. |
| Device-loss recovery | Recovery depends on regaining the linked number and passing Binance.US verification. | Loss of the enrolled phone requires the Binance.US Authenticator Issues or reset process, with email and identity confirmation. |
| Phone-number takeover exposure | Codes sent by text are tied to the security of the mobile number and carrier account. | Does not rely on delivery of an SMS code; access depends on the enrolled app and its protected setup key. |
| App compatibility | No authenticator-app requirement. | Use a six-digit TOTP app that accepts the 16-digit binding key. Binance.US names Authy, Okta Verify, Microsoft Authenticator, Duo, and 2FAS as examples. |
Binance.US’s published guidance does not provide a Binance.US-specific compromise rate or percentage showing that one method prevents a particular share of attacks. The practical distinction is dependency: SMS depends on the phone network and number, while an authenticator depends on the enrolled device, accurate time, and secure retention of its setup information.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteHarden the account after enabling 2FA
Create an anti-phishing code
Use the Security settings to create an anti-phishing code. Legitimate Binance.US notification emails can then be checked for that code. If an email lacks the code or displays a different one, do not follow its links or disclose credentials; open the verified login address directly instead.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Review devices and sessions
Open device-management controls in Security and review the phones, browsers, and other devices associated with the account. Remove access you no longer recognize or use. A new device prompt, login alert, or 2FA request that you did not initiate is a reason to change your password and investigate immediately.
Consider withdrawal-address whitelisting
Security settings may include withdrawal-address whitelisting. Add only addresses you have checked carefully, and review the list periodically. Whitelisting limits where withdrawals can go if an attacker gets into the account, but it does not replace 2FA or a strong password.
Protect credentials from impersonation
Keep your password and every 2FA code private. Binance.US representatives will not ask for either. Do not read a code to someone who contacts you by phone, email, chat, or social media, even if the person claims to be handling a security case.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Disable the account if activity looks suspicious
If you notice an unfamiliar login, device, withdrawal, or other suspicious activity, use the account-disable control and contact Binance.US through its official support channels. Act before attempting repeated logins or sending additional codes to an unknown requester.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Fix a Binance.US authenticator code that is not working
An invalid-code message is often caused by clock drift rather than a wrong enrollment. Work through these checks in order:
- Set the phone’s date, time, and time zone to automatic network settings.
- Close and restart the authenticator app, then restart the phone.
- Wait for a newly generated six-digit code and enter it before it expires. Do not add spaces or copy an older code.
- Confirm that you are selecting the Binance.US entry in the app, not a similarly named entry for another account.
- Return to the verified Binance.US login page and retry once. Avoid repeated attempts from a page reached through an email link.
- If the code still fails, use Binance.US’s documented Authenticator Issues or reset flow rather than deleting the app entry. Deleting the entry without a recovery path can make the later reset harder.
When an app was recently restored, migrated, or reinstalled, check whether it retained the correct Binance.US enrollment. A six-digit TOTP app can be compatible in principle while still producing invalid codes if it was bound to the wrong account or an incorrect key.
Fix Binance.US SMS codes that do not arrive
- Check cellular signal and, if appropriate, Wi-Fi calling or messaging availability.
- Toggle airplane mode off and on to reconnect the phone to the network.
- Confirm that the phone number in Binance.US Security is accurate and still under your control.
- Check spam, blocked-number, and unknown-sender filters in the messaging app.
- Clear the browser cache or try the current supported browser interface again.
- Make sure Binance.US services are supported in your region. Regional availability can affect delivery and account functions.
- Check whether the phone number is already linked to another Binance.US account; that condition can prevent delivery.
- If texts still do not arrive, stop requesting repeated codes and use the official support or account-recovery route.
Never give a code to a person who offers to “test” delivery. A genuine support representative will not need your 2FA code.
Reset 2FA after losing a phone or authenticator
If you lose the device that receives SMS messages or generates TOTP codes, use Binance.US’s Authenticator Issues option or its documented reset flow from the sign-in or security interface. The reset is identity-verified rather than an instant bypass.
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- Start the Authenticator Issues or 2FA-reset flow.
- Verify the account email address when prompted.
- Complete the requested identity confirmation.
- Submit the reset request and wait for Binance.US review. The typical review period is 48–72 hours.
- After approval, enroll a replacement 2FA method from Security and confirm that you can generate or receive a code before relying on the account again.
A successful 2FA reset normally creates a 48-hour withdrawal hold. Trading, deposits, and other account functions remain available during that hold, but withdrawals cannot be completed until it expires. Plan urgent transfers around that delay instead of trying to bypass it with repeated reset requests.
If you changed your password as part of the recovery, note that Binance.US’s Security settings separately state a 24-hour withdrawal restriction after a password change. The password-change restriction and the 2FA-reset hold are separate controls and can affect the timing of a withdrawal.
Safe operating habits after recovery
Re-enroll deliberately
Once the reset is approved, enroll the replacement app or phone from the Security page while using a trusted device and network. Test the new method immediately, then sign out and sign in again only if you can do so without losing your recovery access.
Keep recovery information private
Store the authenticator enrollment key, if you retain it, in a protected location that is not exposed in screenshots, cloud notes shared with others, or email forwarded to yourself. Do not place it in a message to support. Anyone with the key may be able to generate valid TOTP codes.
Check account controls after a security event
After recovering access, review devices, anti-phishing code settings, withdrawal addresses, recent account activity, and contact information. Remove anything you do not recognize and change the password if there is any possibility it was exposed.
A practical decision path
- New account: complete the required SMS setup during registration.
- Established account with reliable phone service: open Security and add an authenticator app, keeping SMS as an additional method if you can secure the number.
- Frequent travel or unreliable cellular coverage: prioritize a compatible six-digit TOTP app so codes can be generated without SMS delivery.
- Lost device: use Authenticator Issues, complete email and identity verification, and account for the review period and withdrawal hold.
- Unexpected activity: stop responding to unsolicited messages, disable the account if necessary, and contact Binance.US through its official support channels.
With at least one functioning 2FA method, a private password, verified login address, anti-phishing code, reviewed devices, and carefully controlled withdrawal addresses, your Binance.US account has the protection layers the platform documents for customers.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minute
