Two-factor authentication (2FA) adds a second lock to your Coinstash account. This guide shows you how to turn it on from the desktop website, mobile website or mobile app, and what to do if something doesn't work.
What is 2FA?
Think of 2FA as a "double lock" for your account. As well as your password, you'll need a unique, time-sensitive code generated by an app on your phone (such as Google Authenticator). Even if someone discovers your password, they still can't get into your account without your phone.
Before you start
Your email inbox: We'll send you a verification code by email during setup.
An authenticator app on your phone: We recommend Google Authenticator, which is free on the App Store and Google Play.
Somewhere safe to record your setup key: You'll need it if you ever lose or replace your phone.
Prefer screenshots? See the step-by-step picture guide: How do I Set Up 2FA? (Mobile App).
Step 1: Open your security settings
How you get there depends on how you're logged in:
Desktop Website: Click your Profile Image/Name (top right) > Settings > Security (left menu).
Mobile App: Tap your Profile Image (top right) > Security.
Mobile Website: Tap your Profile Image (top right) > Settings > scroll down to Set Up 2 Factor Authentication.
Step 2: Verify your email
Click Turn 2FA On or Enable.
Check your inbox for a verification code. Enter it into Coinstash and click Continue.
Note: If you request more than one code, only the most recent one will work.
Step 3: Connect your authenticator app
If you're setting up on a desktop computer:
Open Google Authenticator on your phone and tap the + button.
Select Scan a QR code and point your camera at the QR code on your computer screen.
If you're using the mobile app or mobile website:
On the Coinstash screen, you'll see a Setup Key (a string of letters and numbers). Copy this key.
Open Google Authenticator, tap the + button and select Enter a setup key.
Account name: Type "Coinstash".
Your key: Paste the key you copied, then tap Add.
⚠️ Keep a backup of your setup key in a secure, offline place, such as written on paper and stored somewhere safe. Never store it in your email or share it with anyone.
Step 4: Activate 2FA
Go back to the Coinstash app or website.
Enter the 6-digit code currently showing for Coinstash in Google Authenticator.
Click Activate Two Factor Authentication or Next.
How do I know it worked? The button will now say Turn 2FA Off or Disable. Your account is now protected, and you'll be asked for a code from your authenticator app when you log in.
⚠️ Keeping your 2FA safe
Never share your codes or setup key. Coinstash staff will never ask for your 2FA code, setup key or password. Anyone who does is trying to get into your account. Learn about impersonation scams.
Your email code isn't your 2FA code. The 2FA code always comes from your authenticator app.
Troubleshooting
My code is incorrect. Make sure the date and time on your phone are set to "Automatic". If your phone's clock is off by even a minute, the codes won't match. More fixes are in How do I Troubleshoot 2FA Issues?
The email code didn't work. Use the most recent code we sent. Earlier codes stop working when you request a new one.
I've lost my phone. If you kept a backup of your setup key, add it to an authenticator app on your new device. If not, contact our support team. If your phone was stolen, also follow Account Protection in Case of Device Theft.
Need a hand? Our Brisbane-based support team is here to help — tap the chat icon in the app or on the website to get in touch.