How to Protect Your Crypto from Exchange Hacks
Essential security practices every crypto investor should follow to keep their assets safe. Learn about 2FA, withdrawal whitelists, and when to use hardware wallets.
David Park
The Reality of Exchange Security
While major exchanges invest heavily in security, hacks still happen. Mt. Gox, Bitfinex, KuCoin, and others have all suffered security breaches. Here's how to protect yourself.
Essential Security Practices
1. Enable Two-Factor Authentication (2FA)
Never skip this step. 2FA adds a crucial second layer of security.
Best to Worst:
- Hardware Security Key (YubiKey) - Most secure
- Authenticator App (Google Authenticator, Authy) - Very secure
- SMS 2FA - Better than nothing, but vulnerable to SIM swapping
Our recommendation: Use an authenticator app at minimum. Hardware keys if you hold significant amounts.
2. Use Strong, Unique Passwords
- Minimum 16 characters
- Mix of letters, numbers, symbols
- Never reuse passwords
- Use a password manager (1Password, Bitwarden)
3. Enable Withdrawal Whitelists
Most exchanges offer this feature:
- Only pre-approved addresses can receive withdrawals
- New addresses require 24-48 hour waiting period
- Even if hacked, attacker can't withdraw to their address
Enable this on: Coinbase, Kraken, Gemini, Binance
4. Verify Email and Phone Security
Your email is the gateway to your exchange account:
- Enable 2FA on your email
- Use a dedicated email for crypto
- Check for unauthorized access regularly
- Be aware of SIM swapping attacks
5. Beware of Phishing
Common phishing tactics:
- Fake exchange emails
- Lookalike domains (coinbase.com vs coinbaze.com)
- Fake customer support on social media
- Malicious browser extensions
Protection:
- Bookmark exchange URLs
- Never click email links - type URLs manually
- Verify SSL certificates
- Use official apps only
When to Use Self-Custody
Consider Moving to a Hardware Wallet If:
- You hold more than you can afford to lose
- You're holding long-term (not actively trading)
- You want maximum security
- You're comfortable with self-custody responsibility
Popular Hardware Wallets:
- Ledger Nano X - Most popular, Bluetooth enabled
- Trezor Model T - Open source, touchscreen
- Coldcard - Bitcoin-only, maximum security
Keep on Exchange If:
- You're actively trading
- You're using staking features
- Amounts are small enough to risk
- You're not confident with self-custody
Exchange Security Checklist
ā 2FA enabled (authenticator app or hardware key)
ā Strong, unique password
ā Withdrawal whitelist enabled
ā Email 2FA enabled
ā Phone number secured against SIM swaps
ā Official app installed (not from third-party sources)
ā Exchange URLs bookmarked
ā Regular account activity reviews
What to Do If You're Hacked
- Immediately contact exchange support
- Change passwords on email and exchange
- Revoke all API keys
- Check for unauthorized withdrawals
- Document everything for potential recovery
- Report to local law enforcement if significant
The Bottom Line
No security measure is 100% foolproof, but following these practices dramatically reduces your risk. The few minutes spent on security setup could save you from devastating losses.
Remember: Not your keys, not your coins - but exchanges are convenient. Find the right balance for your situation.