What is Two-factor authentication (2FA)?

Two-factor authentication is a simple yet effective security layer to prevent unauthorised access of your account. It works by generating a unique algorithm you can execute on an authenticator app (such as Google Authenticator, described below), which will generate a time-sensitive string of 6-digit numerical codes. This way, should some of your account details be discovered (username, email, password), access is not possible without the unique 2FA code available in your authenticator app.

The method used is a time-based One-Time Password algorithm: every time you open your authenticator, a randomly generated six-digit number sequence, aka the one-time password, is shown. If you have enabled Two-factor authentication (2FA), you will be prompted to complete the 2-step verification each time you log in or make a withdrawal. Also, please print out the QR code or write down the manual code for account recovery - this will go a long way should you ever lose or damage your phone!

We strongly recommend using Google Authenticator.

Google Authenticator (available on the iOS App Store or Google Play Store) is an app which generates 2FA codes based on either scanned QR codes or manually entered setup keys. 

You can find links to download it from mobile appstores below:

Android

iOS

How to Enable Two-factor Authentication on your account:

1. Go to your account settings page.
2. Click on "Account" and choose "Google Authenticator" (NB: in order to enable 2FA, your email must be verified).
3. Scan the QR code in your desired authenticator app, or you can enter the "Key value" manually.
4. Enter the time-sensitive code as it appears in your authenticator app and click "Submit Code"
5. If the code is valid, you should now see that "Google Authenticator is enabled".

If you wish to Disable Two-factor Authentication:

1. Go to your account settings page.
2. Click on "Account" and choose "Google Authenticator"
3. Enter the code generated in your Authenticator app and click "Submit Code"
4. If the code is valid, you should now see that "Google Authenticator is disabled".