Webot offers 2-step verification, known also as 2-factor (2FA) or multifactor authentication, as an added security layer in addition to your password.
With 2-factor Authentication enabled on your account, you'll need to provide a unique verification code sent to your phone in addition to your username and password.
Some events that can trigger 2-step verification
Sign-in attempt from an unrecognized device
Sign-in attempt from an unrecognized IP address
Sending crypto out of your Webot account
Learn how to troubleshoot 2-step verification issues.
Passkey - Secure (app only)
A passkey lets you log in, withdraw and verify with Face ID or fingerprint instead of a code. To add one, open the Webot app, tap the Webot icon at the top left of the Home screen, then tap [Security] → [Passkey] → [Create a passkey]. Passkeys are only available in the app, not on the website.
iOS allows one passkey per device. Android allows only one passkey in total. If your device does not support passkeys, use Google Authenticator instead.
Before you can withdraw crypto or USD, you must have a Passkey or Google Authenticator.
If you delete a passkey, all withdrawals (crypto and USD) are paused for 24 hours. You can still trade and deposit.
Google Authenticator (TOTP) - Secure
These are apps that generate a one-time code based on both of these factors:
1) the current date and time on your phone and
2) a secret key known only to you.
Webot shows you a secret key, which you'll then need to paste into an Authenticator app on your phone. To read more about how to bind Google Authenticator, please click here.
You can download Google Authenticator from the app store.
Email - Least secure
2FA using email adds an extra layer of security to online accounts. After entering their username and password, users receive a unique, time-sensitive code via email, which they must enter to complete the login process. This method reduces the risk of unauthorized access by verifying the user's identity through their registered email address.
SMS/Text - Least secure
SMS/Text is a phone app authentication or text-based authentication. Since SMS is linked to a phone number, it can leave you susceptible to phone number porting attacks. These types of attacks involve an attacker transferring or "porting" a victim's phone number to a device the attacker controls, effectively taking over the number and associated 2-step verification codes.