How to Configure Withdrawal Security Settings
Set up the withdrawal whitelist: it is on by default, a new address becomes usable 24 hours after you add it, and turning it off takes your passkey.
Withdrawal settings decide where your funds can go. The withdrawal whitelist is on by default: withdrawals go only to addresses on your list, and a new address becomes usable 24 hours after you add it. Turning the whitelist off takes your passkey, so an open session alone cannot send your funds to a new address.
Before you start
- A passkey, if you may ever want to turn the whitelist off.
- The destination addresses you actually use, ready to add to the whitelist.
Review Current Settings
Go to Profile > Security > Withdrawal Whitelist. It shows whether the whitelist is on, the addresses on it, and when each new address becomes usable.
Keep Address Whitelisting On
Address whitelisting is on by default: withdrawals go only to the addresses on your whitelist. A new address becomes usable 24 hours after you add it, so somebody who gets into your account cannot send funds anywhere new before you notice.
Turning the Whitelist Off
Turning the whitelist off takes your passkey and applies at once; withdrawals can then go to any address. Turning it back on takes nothing. Either way, each withdrawal still needs your own 2FA code or passkey.
Review and Update Regularly
Periodically review your whitelisted addresses and remove any you no longer need. Keep your 2FA device secure and backup codes stored safely offline. Strong withdrawal security is your last line of defense against unauthorized fund transfers.
If something goes wrong
- A withdrawal is blocked to an address you own.
- While the whitelist is on, withdrawals go only to addresses on it. Add the address, wait the 24 hours, then retry. The delay cannot be skipped.
- You are locked out of your own settings after a device change.
- Restore access with a backup code or a second registered device, then re-register the new one. Security settings deliberately require a full factor, not just an open session.
- You want the whitelist off for a while.
- Turning it off takes your passkey and applies at once. Turning it back on takes nothing, so switch it on again as soon as you are done.
Frequently asked questions
- Why is there a delay after adding a whitelist address?
- So that an attacker who gets in cannot add their own address and empty the account in the same session. The delay gives you time to notice and revoke.
- Should I keep the whitelist on?
- If you withdraw to the same few addresses, yes: it is on by default, and it is the strongest withdrawal setting you have. If you withdraw to new addresses often, the 24-hour wait will be a nuisance.
- Do these settings apply to internal transfers?
- They govern withdrawals leaving the platform. Moving value between your own wallets is unaffected.