Zhenku

Independent · Unofficial · Binance account security

Set a guardian
over your coins

When people lose crypto, it's usually not the market — it's an account that was never locked down. We walk you through every Binance security setting, one at a time.

5 wards 9 tools 0 investment tips
Zhenku Editorial · Independent third party, not affiliated with Binance We only cover account security settings and steps — no coin picks, no calls to trade, no investment advice Binance's official pages are the final word · Spot an error? Send a correction
Wards · One to Five

The guardian's five wards

From setting a solid password to recovering a hacked account, these five wards build up around your account layer by layer. Each one links to its own guide and a self-check tool.

01

Seal the GateLogin & fund passwords

Login password, fund password, emergency freeze — bolt the first door shut. How weak passwords get cracked through credential stuffing, and why your fund password should never match your login one.

password · credential stuffing
02

Open the EyesTwo-factor auth (2FA)

How to choose between SMS, an authenticator app, a security key and passkeys; what to do when you switch phones, lose your phone, or travel and can't receive codes. And why SMS is the one method you shouldn't lean on alone.

2FA · SIM swap
03

Verify the WordAnti-phishing code

A secret word shared just between you and Binance — once it's set, any "Binance email or SMS" that arrives without it should be treated as phishing. Two minutes to set up, and it stops most phishing attempts cold.

anti-phishing
04

Lock the DoorWithdrawal whitelist & API keys

Turn on the withdrawal address whitelist and, even if someone gets into your account, funds can only move to addresses you've already approved. Give API keys the least access they need and tie them to an IP whitelist, so no script can quietly empty the place out.

whitelist · API
05

Drive Them OffIf you get hacked

What to do in the first ten minutes when it actually happens: change passwords, freeze the account, revoke API keys, check logged-in devices, report to Binance. Whether you can recover the funds and whether reporting it helps — spelled out step by step.

emergency · decision tree
Toolbox · Tools

Hands-on security tools

Nine tools that run entirely in your browser — nothing is uploaded, nothing goes online. Run the checkup first, then work through whatever it flags, one item at a time.

Case Files · Selected

The ways people lose their coins

Things that genuinely happen, told from the user's side: what to worry about, what others have run into, and how to steer clear.

№ 01

Your Binance account got hacked: what to do in the first ten minutes

Change passwords, freeze, revoke API keys, check devices — get the order wrong and you may not get the funds back.

~14 min
№ 02

What the anti-phishing code is, and why it stops most fake Binance emails

A secret string you set in two minutes — how to use it and what makes a good one.

~7 min
№ 03

Why SMS codes are the weakest 2FA: how SIM swapping actually works

And exactly where an authenticator app or security key is safer.

~9 min
№ 04

The withdrawal whitelist: turn it on and even a hacker can't move your coins

How to enable it, how long it takes to kick in, and why the wait is worth it.

~6 min
№ 05

The full Binance security checklist: the protections to switch on from day one

One read that turns everything on — just follow it through.

~15 min
№ 06

How to be sure you downloaded the real Binance app, not a phishing clone

From where you got it to checking the signature — a few steps you can do yourself.

~8 min
Latest · New

Just added

New guides land here first, so you can see at a glance what Zhenku most recently added.

New

A stranger has your account ID and sign-up email. What that unlocks, and what it doesn't

An ID says which account is yours; it doesn't open it. The real use of a leaked ID is making a caller sound official.

2026-09 · ~6 min
New

Wrong code again? A ten-minute wait is not a locked account

One side is answered by a fresh code and ten minutes; the other by the unlock pop-up after login, plus the wait before withdrawals return.

2026-09 · ~8 min
New

Email, phone and authenticator all gone: what is left of account recovery

Lay “everything” out as four layers, then see whether the self-service reset still works — and what the manual review asks for when it does not.

2026-09 · ~8 min
New

Put a PIN on your SIM card

A carrier-side lock for the number itself: pull the card into another phone and it stays locked — no calls, no cellular data.

2026-09 · ~7 min
New

Before the old phone leaves: the account side

A factory reset only handles the device. Sessions, trusted devices and authenticators live in the account.

2026-09 · ~8 min
New

You typed your password into a phishing page. Here's the next hour, in order

Sort what you handed over into four tiers, then work in order: clean device, mailbox before exchange, sessions closed.

2026-08 · ~10 min
New

One password, ten sites: how credential stuffing opens accounts one by one

It replays real leaked pairs instead of guessing, which is why complexity alone will not save you.

2026-08 · ~9 min
New

Authenticator cloud sync: convenience on one side, one basket on the other

What syncs is the seed, not the six digits. Three questions settle it, and high-value accounts get handled separately.

2026-08 · ~8 min
New

The Binance 2FA setup key: where to keep it, and what to do when it's gone

That setup key is one important offline recovery route: where to keep it, how to verify it, and which official paths remain if it is gone.

2026-07 · ~9 min
New

Binance authenticator won't bind or scan? Work through it in this order

The QR won't scan, or it keeps saying "wrong code" — split into two stages to clear the usual culprits.

2026-07 · ~8 min
Everything · Guides & tools

Tighten up your account — pick a place to start

Twenty-one guides and all nine tools, sorted into three columns by topic; the other six are above, under Editors’ pick and Just added. Whatever you haven't set up yet, click straight to it.