Phishing, fake support, clipboard malware and fake USDT. 12 simple, practical tips to secure your crypto wallet and keep your funds safe.
What is two-factor authentication and why your wallet needs it
How two-factor authentication (2FA) works, whether Google Authenticator beats email or SMS codes, and how to set it up and back it up for your crypto wallet.
On this page
Most hacked accounts start with a leaked password: one reused on another site, typed into a phishing page, or saved by malware. Two-factor authentication (2FA) makes sure that even if your password leaks, nobody can touch your funds.
2FA in plain words
Normally, signing in or withdrawing needs one thing: something you know (your password). 2FA adds a second layer: something you have, such as your phone or access to your email.
Someone with only your password can't do anything without that second code. That's why 2FA is one of the most effective protections for a crypto wallet.
Types of 2FA
Authenticator app codes (recommended)
Apps like Google Authenticator generate a new 6-digit code every 30 seconds from a secret key saved on your phone once, when you scan a QR code.
- Pros: works offline, doesn't depend on your SIM card, hard to intercept.
- Watch out: lose your phone without a backup of the key and recovery takes time.
Email codes
A one-time code is sent to your email. It's only as secure as your email, so your email account needs a strong password and 2FA too.
SMS codes
Common, but the weakest option. In a SIM swap, a scammer moves your number to their SIM and receives your texts. For a crypto wallet, avoid SMS as your only second factor.
Hardware security keys
USB security keys are the strongest option, but not every service supports them.
Why it's vital for a crypto wallet
Crypto transactions are irreversible. A bank may be able to reverse a fraudulent transfer; once USDT leaves your wallet and is confirmed on-chain, nobody can pull it back. The moment of withdrawal is the most important security moment.
That's why 2FA on withdrawals is not optional in TetWallet: no withdrawal goes out without a Google Authenticator code or an email code.
How to set up Google Authenticator
- Install Google Authenticator from the App Store or Google Play.
- In your wallet, open Profile & security and choose to enable the authenticator.
- In the app, tap + and scan the QR code.
- Write down the text key somewhere safe and offline. With it you can restore the authenticator on a new phone.
- Enter the 6-digit code from the app to confirm.
Common 2FA mistakes
- Sending your code to "support". Real support never asks for your 2FA code. Anyone who does is a scammer.
- Keeping a screenshot of the QR in your gallery. If your gallery or cloud leaks, your second factor leaks with it.
- Using an insecure email. If codes go to email, it must be your best-protected account.
- Deleting the authenticator when changing phones. Move your codes first, then wipe the old phone.
Lost access to your authenticator?
If you saved the backup key, use it to set up the authenticator on your new phone. If not, contact official TetWallet support from the site or the bot. Resetting 2FA requires identity checks through your email, and for your safety withdrawals stay locked for a while afterwards, so you have time to react if someone else made the request.
Frequently asked questions
Which is better, Google Authenticator or SMS?
Google Authenticator. Its codes are generated on your phone and resist SIM swaps and SMS interception.
If my password leaks but 2FA is on, are my funds safe?
For withdrawals, yes: no withdrawal is possible without the second code. Still, change your password right away and review your active devices.
Does Google Authenticator need the internet?
No. Codes are generated from the time and the key stored on your phone. Your phone's clock just needs to be correct.
Why is my authenticator code rejected?
Usually your phone's clock is off. Set the time to automatic and try again.