This guide shows you how to turn on two-factor authentication (2FA) in the Coinstash mobile app. It takes a few minutes and is one of the best things you can do to protect your account.
Using the website instead? See Securing Your Account with Two-Factor Authentication (2FA), which covers the Desktop Website and Mobile Website.
What is 2FA?
2FA stands for two-factor authentication. It means you need two different things to get into your account: your password, plus a 6-digit code generated by an authenticator app on your phone (such as Google Authenticator).
For example, when you log in to Coinstash:
First, you enter your password.
Then, you enter the code shown in your authenticator app.
This makes it much harder for anyone else to get into your account, even if they've found out your password.
Before you start
Your email inbox: We'll send a verification code to the email address on your Coinstash account, so have your inbox handy.
An authenticator app: If you don't already have one, we recommend Google Authenticator, which is free.
Somewhere safe to note your setup key: A pen and paper is perfect. You'll need the key if you ever lose or replace your phone.
How to set up 2FA in the mobile app
Step 1 – Open your profile
Tap your profile image in the top right-hand corner.
Step 2 – Go to Security
Tap Security.
Step 3 – Tap Enable
In the 2FA section, tap Enable.
Step 4 – Enter the email code
We'll send a code to your email address. Enter it in the app.
Tip: If you request more than one email code, only the most recent code will work. All earlier codes expire automatically.
Step 5 – Install an authenticator app
If you don't already have a 2FA app on your phone, download and install Google Authenticator. It's free.
Step 6 – Add a new account in Google Authenticator
Open Google Authenticator and tap the + button.
Step 7 – Choose Enter a setup key
Select Enter a setup key.
Step 8 – Enter your account name and key
Account name: Type something you'll recognise, such as Coinstash.
Your key: Enter the key shown in the Coinstash app under Step 2: Copy this code to Google Authenticator.
Then tap Add.
⚠️ Write this key down and keep it somewhere safe and offline. If you lose or replace your phone, it lets you add Coinstash to a new authenticator app. Never share it with anyone.
Step 9 – Tap Next in Coinstash
Go back to the Coinstash app and tap Next.
Step 10 – Enter the 6-digit code
Enter the 6-digit code currently showing for Coinstash in your authenticator app. Codes refresh regularly, so use the one on screen right now.
Step 11 – Check it worked
2FA is set up correctly when the Enable button in the 2FA section has changed to Disable. From now on, you'll be asked for a code from your authenticator app when you log in.
⚠️ Important
Never share your 2FA codes or setup key. Coinstash staff will never ask for them. Anyone who asks is trying to get into your account. Learn about impersonation scams.
Your email code and your 2FA code are different. The 2FA code always comes from your authenticator app.
Troubleshooting
The app says my code is invalid. Make sure the time on your phone is set automatically. If your phone's clock is out by even a minute, codes won't match. See How do I Troubleshoot 2FA Issues?
My email code didn't work. Check you're using the most recent email we sent. Earlier codes expire as soon as you request a new one.
I've lost or replaced my phone. If you saved your setup key, add it to the authenticator app on your new phone. If you didn't, contact our support team. See also Account Protection in Case of Device Theft.
Need a hand? Our Brisbane-based support team is here to help — tap the chat icon in the app or on the website to get in touch.