To enable 2FA on Phemex, go to Account & Security, click Bind under Google Authenticator, scan the QR code with the Google Authenticator app, save your Secret Key as a backup, and enter the 6-digit code to confirm.
Step-by-Step Guide
Web
-
Download Google Authenticator. Install the Google Authenticator app from the Google Play Store (Android) or the App Store (iOS) on your phone.
-
Open Security Settings. Log in to Phemex.com, hover over your profile icon in the top right corner, and click Account & Security.
-
Start the binding process. In the Security Settings section, find Google Authenticator and click the Bind button. A QR code and a Google Key (Secret Key) will appear on screen.
-
Scan the QR code. Open Google Authenticator on your phone, tap the + icon, and select Scan a QR code. Point your camera at the QR code on your Phemex screen. If scanning does not work, tap Enter a setup key and manually type the Google Key displayed on screen.
-
Save your Secret Key. Before continuing, copy or write down the Google Key (Secret Key) and store it in a safe place. This key is your only way to recover 2FA if you lose your phone or switch devices. Without it, recovery requires a manual identity verification process that can take up to 24 hours.
-
Enter the 6-digit code. Google Authenticator now displays a 6-digit code that refreshes every 30 seconds. Enter the current code into the verification field on your Phemex screen and click Confirm.
-
Complete email verification. Phemex sends a verification code to your registered email. Check your inbox, enter the email code, and click Confirm to finish. 2FA is now active on your account.
Tip: The 6-digit code in Google Authenticator refreshes every 30 seconds. If your code is rejected, wait for a new code and try again immediately. Do not enter a code that is about to expire.
Mobile App
-
Download Google Authenticator from the Play Store or App Store if you do not already have it.
-
Open Security Settings. In the Phemex app, tap your profile icon, then tap Account & Security.
-
Bind Google Authenticator. Tap Bind next to Google Authenticator. A Secret Key will appear on screen.
-
Copy the Secret Key. Tap to copy the key and save it in a secure location. Then open Google Authenticator, tap the + icon, select Enter a setup key, paste the key, and tap Add.
-
Enter the 6-digit code. Return to the Phemex app, enter the code displayed in Google Authenticator, and tap Confirm.
-
Complete email verification. Enter the email verification code sent to your registered email and tap Confirm. 2FA is now active.
Tip: Save your Secret Key before closing the binding screen. Once you leave this page, the Secret Key cannot be displayed again.
Key Facts
| Parameter | Detail |
| Supported 2FA method | Google Authenticator (TOTP) |
| Code refresh interval | Every 30 seconds |
| Code length | 6 digits |
| Required for | Login, withdrawals, security changes, API key creation |
| Backup method | Save the Secret Key (Google Key) during initial setup |
| Recovery without Secret Key | Manual identity verification (ID + video), up to 24 hours |
| Cost | Free (Google Authenticator is a free app) |
Common Issues
-
"Invalid 2FA code" error after entering the correct code — The most common cause is a time sync issue between your phone and Phemex's server. Open your phone's Settings, go to Date & Time (or General > Date & Time), and turn on automatic time sync. Then open Google Authenticator, wait for a fresh code, and try again.
-
"I have multiple accounts in Google Authenticator and entered the wrong code" — Google Authenticator lists all linked accounts. Look for the entry labeled phemex.com (your-email@example.com) and use the code from that specific entry. Other entries belong to other services.
-
"I lost my phone and cannot access Google Authenticator" — If you saved your Secret Key, open Google Authenticator on a new device, tap +, select Enter a setup key, and enter your saved key. If you do not have your Secret Key, you will need to reset 2FA through the manual verification process (see the related article below).
-
"I switched phones and forgot to transfer Google Authenticator" — If your Google Authenticator is synced to a Google account, install the app on your new phone and sign in with the same Google account. Your codes will sync automatically. If not synced, use your Secret Key to re-add the account manually.
FAQ
Q: Is 2FA required on Phemex?
A: 2FA is strongly recommended but not mandatory for login. It is required for withdrawals and certain security-sensitive actions. Enabling it significantly reduces the risk of unauthorized access.
Q: Can I use an authenticator app other than Google Authenticator?
A: Yes. Any TOTP-compatible authenticator app works, including Authy, Microsoft Authenticator, and 1Password. The setup process is the same: scan the QR code or enter the Secret Key.
Q: What happens if I lose my Secret Key and my phone?
A: You will need to reset 2FA through Phemex's manual verification process. This requires uploading your ID and recording a short video. The review typically takes up to 24 hours.
Submit Ticket