> ## Documentation Index
> Fetch the complete documentation index at: https://docs.everstrike.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Two-Factor Authentication (2FA): Protect Your Login and Withdrawals

> Turn on two-factor authentication with an authenticator app, so signing in and CEX mode withdrawals need a 6-digit code from your phone.

Two-factor authentication (2FA) adds an extra layer of security: signing in and submitting CEX mode withdrawals need a code from your phone, not just your password.

## Turn it on

**1. Open Settings**

Go to [Settings](https://app.everstrike.io/app/settings) and choose **Enable Two-Factor Authentication (2FA)**. You can also start it from the [Security Centre](https://docs.everstrike.io/account/security-centre.md) with **Turn on two-factor**.

**2. Scan the QR code**

Scan the QR code with an authenticator app on your phone.

**3. Enter the code**

Enter the 6-digit code the app shows, then choose **Finish Setup**.

From now on, Everstrike asks for a current 6-digit code when you sign in and when you submit a CEX mode withdrawal.

## Why turn it on

* **A stolen password isn't enough.** Without the code from your phone, nobody can sign in.
* **It protects withdrawals and API keys.**
* It's one of the steps on the [getting started checklist](https://docs.everstrike.io/account/getting-started-checklist.md).

> [!WARNING]
>
> Keep access to your authenticator app. If you change phones, move your authenticator accounts to the new phone before you reset the old one.

## Related

* [Security Centre](https://docs.everstrike.io/account/security-centre.md): every protection on your account in one place.
* [Password](https://docs.everstrike.io/account/password.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.