Two-factor authentication (2FA) with an authenticator app

2FA adds a second step to protect your account. With an authenticator app, a 6-digit code from your phone is needed in addition to your normal credentials. The app description reads: "Use an Authenticator App to protect your account and transactions."

Where to find it

Security > section Two-Factor Authentication (2FA) > row Authenticator App. The status shows Off or On.

Turn 2FA on

1. Click Set up. The window is titled "Enable 2FA" and says: "Add an extra layer of security to your account by enabling two-factor authentication."
2. Read the three steps: Download App ("Download an Authenticator app (like Google Authenticator or Authy)"), Scan QR Code, Enter Code. Click Get Started.
3. Scan the QR code with your authenticator app ("Scan this QR code with your authenticator app"). If you cannot scan, use the key under "Or enter this key manually:". Click Continue.
4. Enter the 6-digit code from the app ("Enter the 6-digit code from your authenticator app") and click Verify & Enable.
5. You see "2FA Enabled" and "Your account is now protected with two-factor authentication." Click Done. The row now shows On.

You can also start from the Set up link next to "Two-Factor Authentication (2FA)" in the Security Checkup.

Messages while turning on

The app does not show backup codes when you enable 2FA in this version. Do not rely on backup codes.

Turn 2FA off

1. In the Authenticator App row click Manage. The window is titled "Disable 2FA".
2. The warning says: "Disabling 2FA will make your account less secure. Enter your authenticator code or a backup code to proceed."
3. A "Security Verification" step follows with the methods shown for your account (for example Authenticator App, Email Verification, SMS Verification, Fund Password). Complete each one.
4. You see "Success" and "Two-factor authentication has been disabled".

"Failed to disable 2FA. Try again." means the request could not start or finish; try again. If a verification code is wrong, the screen tells you how many attempts remain (see the verification codes article).

Important: disabling 2FA starts a temporary withdrawal restriction. The Security page then shows "Security Cooldown Active" with the reason "2FA Disabled" and the remaining time. See the withdrawal cooldown article.

What 2FA is used for

• Security Verification before sensitive actions (see the verification codes article).
• Changing your email when 2FA is on: you are asked for your "2FA Code".
• Changing or adding a phone number when 2FA is on.
• Trusting a device in Device Management ("Enter 2FA Code").

I lost my phone or my authenticator app

The app does not offer a self-service way to reset 2FA, and it does not show backup codes. If you cannot produce an authenticator code:

1. Try any other verification method offered on the "Security Verification" screen (for example Email Verification or SMS Verification if shown).
2. If no method works, contact Support and describe the situation.

Do not use third-party recovery services or send your codes, seed phrase or private key to anyone.

FAQ

Q: The code is always rejected. A: Make sure you use the entry for BYNAI in your app, the code has 6 digits, and your phone time is automatic. Wait for the next code and try again.

Q: Can I use SMS or email instead of an authenticator app? A: Your Email and Phone Number rows appear in the same section. Which methods are requested for an action is decided when the Security Verification starts.

Q: I changed phones. A: If you still have the old phone, sign in to your authenticator there first. Otherwise contact Support.

When to contact Support

Open the chat widget and choose "Contact support" (or open the Help Center and start a chat there). Include:

• Your account email or UID (shown on your profile).
• What you were trying to do and the exact message you saw (a screenshot helps).
• The approximate date and time it happened and the device or browser you used.
• Never include your password, fund password, 2FA codes, backup codes, seed phrase or private key.
• Which verification methods appeared on the "Security Verification" screen.

Safety reminder

Never share your 2FA code, backup codes, password, seed phrase or private key with anyone.

Related terms: 2fa, two-factor, two factor authentication, authenticator, google authenticator, authy, totp, enable 2fa, disable 2fa, turn off 2fa, qr code, setup key, 6-digit code, invalid code, lost phone, lost authenticator, new phone, can't log in, verification failed, backup code, reset 2fa, security code