If you do just one thing to protect your crypto account, make it this. Two-factor authentication — usually shortened to “2FA” — adds a second lock to your account, so that even if someone learned your password, they still couldn’t get in. Here’s how to switch it on, step by step.
The short answer: 2FA asks for a second, ever-changing code (in addition to your password) when you log in. On Coinbase you turn it on in the Security settings. An “authenticator app” is more secure than text-message codes — we’ll show you both.
What 2FA actually does
Your password is the first lock. 2FA is a second lock that needs a short code which changes every minute or comes to your phone. A thief might guess or steal a password — but without that second code, they’re stuck at the door. It’s the same idea your bank uses when it texts you a code.
Two kinds, and which to choose
- Text-message (SMS) codes — Coinbase texts you a code. Easy, and far better than
nothing. - An authenticator app (such as Google Authenticator or Authy) — a free app on your
phone that generates the codes. This is more secure, because it can’t be intercepted
the way text messages sometimes can. If you’re comfortable installing one app, this is
the better choice.
Step by step
- Log in to Coinbase on the app or website.
- Open Settings, then find Security (sometimes shown as a shield icon).
- Look for Two-Factor Authentication (or “2-step verification”) and choose to set it
up. - Pick your method:
– For text codes: enter your phone number and confirm the test code Coinbase sends.
– For an authenticator app: Coinbase shows a square QR code. Open your authenticator
app, choose “add account,” and scan that code. The app will start showing a 6-digit
code that refreshes every 30 seconds. - Enter the code to confirm it’s working.
- Save your backup codes. Coinbase gives you a set of one-time backup codes — write
them down and keep them somewhere safe and private, in case you ever change phones.
That’s it. From now on, logging in asks for your password and the current code.
A few gentle tips
- Keep your backup codes. If you get a new phone and didn’t save them, regaining access
is a hassle. A slip of paper in a safe spot does the job. - Never share a login code with anyone. A real company will never phone and ask you to
read out your 2FA code — that’s a scam, as we cover in
crypto scams that target seniors. - Setting up a new exchange account from scratch? Our
Beginner’s Guide and
Coinbase review walk through it.
The bottom line
Turning on 2FA takes about two minutes and is the single most effective way to keep your account safe. Use an authenticator app if you can, save your backup codes, and never read a code out to anyone. Two minutes now, real peace of mind later.
Ready to take the first step?
Create Your Free Coinbase Account → · Read our honest Coinbase review first
Some links on this page may be affiliate links, including links to Coinbase. If you sign up through them, we may earn a commission at no extra cost to you.
Not financial advice: This article is for general education only. App screens may change over time; follow Coinbase’s on-screen instructions. Please do your own research before investing.