In today’s digital-first environment, securing your online accounts is more critical than ever. Whether you're managing personal assets or representing an organization, understanding how to properly set up and maintain your account security can prevent unauthorized access and ensure smooth operations. This comprehensive guide walks you through key aspects of account verification, passkey creation, multi-factor authentication, and more — all designed to help you protect your digital identity.
From setting up your first login to advanced institutional verification, we cover the most frequently asked questions with clear, step-by-step insights. Whether you’re using a web browser or a mobile app, these best practices apply across platforms.
🔐 Understanding Passkeys: The Future of Secure Login
A passkey is a modern, phishing-resistant method of authentication that replaces traditional passwords. Instead of relying on something you know (like a password), passkeys use something you have — such as your smartphone or hardware security key — combined with biometrics like Face ID or fingerprint scanning.
How to Create a Passkey (App & Web)
Creating a passkey enhances your account security significantly:
- Open the OKX app or visit the OKX website and log in.
- Navigate to Security Settings.
- Select Passkeys > Create New Passkey.
- Follow the prompts to authenticate using your device’s biometric system.
- Confirm and save the passkey securely.
Once created, your passkey will automatically sync with your trusted devices (if enabled), allowing seamless logins without entering passwords.
✅ Pro Tip: Always back up your recovery options. If you lose access to your primary device, you’ll need a recovery code or secondary authentication method.
👉 Discover how to create and manage your secure digital passkey in seconds.
🆔 Verifying Your Identity: Why It Matters
You may be asked to confirm your personal details again, even if you’ve already completed verification. This is part of ongoing compliance with global anti-fraud and regulatory standards.
Common Reasons for Re-Verification:
- Changes in regulatory requirements
- Suspicious login attempts or location shifts
- Updates to your profile information
- Periodic security audits
For individual users, the process typically involves uploading a government-issued ID and completing a live selfie check. Business entities must submit additional documentation based on their legal structure.
🏢 Institutional Verification: Trusts and Public Companies
Organizations like trusts and publicly traded companies require specialized onboarding due to complex ownership structures and compliance obligations.
How Trusts Are Verified
To verify a trust:
- Provide the official trust deed
- Submit proof of trustee identity and authority
- Disclose beneficiaries (if applicable under jurisdiction)
- Complete a Know Your Customer (KYC) form specific to trusts
Verifying a Publicly Traded Company
Public companies must provide:
- Official registration documents from a recognized stock exchange
- Articles of incorporation
- Executive officer identification
- Proof of listing status
These steps ensure transparency and align with financial regulations designed to prevent money laundering and fraud.
👉 Learn how institutions can securely onboard and verify their status online.
🧩 Managing Two-Factor Authentication (2FA)
Using an authenticator app is one of the strongest ways to secure your account. However, it's essential to use it correctly.
Best Practices for Using an Authenticator App
- Disable cloud sync features (e.g., iCloud or Google Drive) for your authenticator app to prevent unauthorized backups.
- Never share screenshots or codes generated by the app.
- Store recovery codes in a secure offline location.
- Use unique 2FA setups for different high-value accounts.
If you need to change your authenticator app, go to Security Settings > Two-Factor Authentication > Change Authenticator and follow the deactivation and reactivation steps carefully.
📱 Mobile & Email Management
Your contact information plays a vital role in account recovery and security alerts.
How to Change Your Phone Number
- Log into your account via the app or web.
- Go to Account Settings > Phone Number.
- Enter your current number and request a change.
- Verify ownership via SMS code.
- Input your new number and confirm.
Note: There may be a cooldown period between changes for security reasons.
Updating Your Email Address
Similar steps apply:
- Visit Settings > Email.
- Confirm current credentials.
- Enter new email and verify via confirmation link sent to that address.
Ensure the new email is accessible and secure before finalizing the change.
👥 Sub-Accounts: Delegation Without Risk
A sub-account allows you to delegate access to team members or family while maintaining full control over the main wallet.
Benefits of Sub-Accounts:
- Role-based permissions (view-only, trading, withdrawal limits)
- Isolated API keys for bots or third-party tools
- Centralized management from the primary account
To create one:
- Go to Sub-Accounts in your dashboard.
- Click Create New Sub-Account.
- Assign username, permissions, and optional funding.
- Share login details securely with the user.
This feature is ideal for traders managing multiple strategies or businesses handling team access.
🔁 Resetting Security Features Safely
Occasionally, you may need to reset critical security settings — especially after losing a device.
How to Reset Your Passkey
If you lose access to your passkey-enabled device:
- Log in using backup methods (e.g., recovery code or alternate 2FA).
- Navigate to Security > Passkeys.
- Select Reset Passkey.
- Follow verification steps and create a new one immediately.
⚠️ Warning: Never attempt to reset security features unless absolutely necessary — this temporarily increases vulnerability.
Similarly, resetting your login password requires email or SMS verification and should always be done through official channels only.
📋 Determining Your Institution Type
Not sure what category your business falls under? Here’s how to find out:
- Sole Proprietorship: Owned by one individual; minimal formal documentation.
- LLC/Corporation: Registered legal entity; requires articles of incorporation.
- Trust: Managed by trustees; governed by a trust deed.
- Public Company: Listed on a stock exchange; publicly traded shares.
Each type has different verification requirements. Choosing the correct one ensures faster approval and fewer delays.
Frequently Asked Questions (FAQ)
Q: Can I use both a passkey and 2FA at the same time?
A: Yes. Passkeys replace passwords but work alongside 2FA methods like authenticator apps for layered security.
Q: What happens if I lose my phone with my passkey?
A: Use a backup device or recovery code to regain access, then reset your passkey immediately.
Q: How often do I need to reverify my identity?
A: Only when prompted due to policy updates, suspicious activity, or changes in information.
Q: Are sub-accounts charged separately?
A: No. Fees are billed to the main account unless otherwise configured.
Q: Can I change my email and phone number at the same time?
A: Yes, but complete each change fully before starting the next for security reasons.
Q: Is institutional verification slower than personal verification?
A: It may take longer due to document complexity, but accurate submissions speed up approval.
👉 Secure your account now with advanced passkeys and institutional-grade protection.
By following these guidelines, you’re not just protecting your data — you're future-proofing your digital presence. Stay proactive, stay verified, and maintain full control over your online identity.