Binance 2FA setup
Enabling 2FA removes the friction Binance applies to weaker accounts. Their TOTP setup is standard — you can run it on your browser keys, in an encrypted password manager, or on an offline machine. Two Binance-specific extras, the anti-phishing code and the withdrawal whitelist, are worth the extra two minutes.
Fact-checked against Binance's official documentation · last reviewed 7 November 2026 · how we review guides
Open the generator for BinanceStep by step
- 01
Sign in and open Security
At binance.com, click your profile icon → “Account” → “Security”. Find “Authenticator App” and click “Enable”.
- 02
Choose software (TOTP) over SMS
Binance presents options. Prefer the authenticator app — SMS codes are interceptable and can fail when you travel.
- 03
Get the key text, not only the QR
The dialog shows a QR code. Below it, click “view the key string” (or similar wording) and Binance reveals a Base32 secret — typically 16 characters, with the alphabet it needs you to copy exactly.
- 04
Paste it into the generator
Paste the key into the generator at 2facounter.com and a live code appears immediately. Airplane-mode first if you like: the page works fully offline.
- 05
Confirm on Binance
Copy the 6-digit code and submit it. Binance then asks for a password/verification — finish that, and withdrawals are now protected.
- 06
Turn on the anti-phishing code and withdrawal whitelist
Back in Security → “Anti Phishing Code”: Binance then stamps every real email with a code of your choosing, so fake “account alert” mail becomes instantly recognizable. In the same settings, add the withdrawal addresses you actually use — whitelisted addresses pause newly added ones rather than letting a thief redirect.
- 07
Save Binance’s recovery key offline
However Binance’s flow surfaces recovery material to you, write it down — it’s your path back if every device with the secret dies.
FAQ
Do I have to scan the QR with a webcam?
No — three none-camera routes: paste the Base32 key text, upload a screenshot of the QR, or just paste the screenshot with Ctrl+V anywhere on the generator page.
Is it safe to use exchange 2FA in a browser?
It’s as safe as the browser. Use a fresh private window on a trusted computer, check the URL (2facounter.com) character-for-character, and clear the key field and site data afterward. Never enter your Binance password on any other page.
Binance shows “Google Authenticator” only — will the browser codes work?
Yes. Binance’s authenticator flow is standard RFC-6238 TOTP at 6 digits / 30 seconds, exactly what the generator implements.
What if my clock is a bit off?
Exchanges are stricter on drift than social networks. If codes keep failing, make sure your device clock syncs automatically with an internet time server (Windows/macOS both have a “sync now” toggle) before blaming anything else.