Sida Loo Ilaaliyo Akoonka Binance: Passkey, 2FA iyo Phishing

Akoon Binance ah amnigiisu kuma dhammaado hal password ama hal OTP. Email-ka diiwaangashan, telefoonka, device-ka, Passkey/Authenticator, sessions-ka, withdrawal addresses iyo API keys waxay wada sameeyaan silsilad. Haddii hal meel daciifto, qof weeraraya wuxuu isku dayi karaa inuu beddelo settings-ka ama lacag dhaqaajiyo.

Hagahan wuxuu ku siinayaa kala hormarin la fulin karo: marka hore jooji dhacdo degdeg ah, kadib adkee gelitaanka, xaqiijinta, fariimaha, devices-ka iyo dhaqdhaqaaqa lacagta. UI labels-ku waxay ku sii qoran yihiin Ingiriisi si aad toos ugu waafajiso Binance Security page-ka.

La hubiyay 2026-08-27. Passkey, Authenticator, withdrawal whitelist, device controls iyo recovery paths way ku kala duwanaan karaan app version, browser, device, region iyo account. Security page-ka live-ka ah iyo official support ayaa go'aamiya options-ka kuu furan.

Tusmada

• Haddii aad aragto qalab ama dhaqdhaqaaq aadan aqoon
• Ilaali email-ka iyo password-ka
• Passkey mise Authenticator
• Kaydi recovery-ga adigoon hal meel ku tiirsanayn
• Samee anti-phishing code si sax ah
• Nadiifi devices sessions iyo connected apps
• Xaddid withdrawal iyo API access
• Marka telefoonku lumo ama 2FA xirmo
• Hubinta ugu dambaysa kahor lacag gelinta

Haddii aad aragto qalab ama dhaqdhaqaaq aadan aqoon

Haddii login notification, unknown device, password reset, 2FA change, API key, withdrawal address ama transaction aadan aqoon aragto, tani ma aha hawl “mar dambe la hagaajin karo.” Haddii aad u baahan tahay inaad kala saarto deposit maqan, withdrawal sugaya iyo fake support, isticmaal xarunta cilad-baarista iyo khiyaanada adigoon dib u dhigin tallaabooyinka degdegga ah ee hoose.

1. Ha riixin link ku jira email, SMS ama chat; si toos ah u fur app-ka ama domain-ka Binance ee aad adigu qortay.
2. Haddii device-kaagu malware looga shakiyo, isticmaal device kale oo nadiif ah.
3. Ilaali email-ka diiwaangashan: beddel password-kiisa, jooji sessions aanad aqoon, hubi recovery email/phone iyo forwarding rules.
4. Binance Security ka revoke-garee devices ama sessions aanad aqoon haddii option-ku muuqdo.
5. Beddel Binance password-ka oo dib u dhis 2FA/Passkey keliya marka aad hubto device-ka.
6. Disable ama xaddid API keys aanad u baahnayn; hubi withdrawal addresses iyo recent activity.
7. Isticmaal Support Center-ka gudaha app/site-ka rasmiga ah haddii access, withdrawal ama settings-ku aanay gacantaada ku jirin.

Ha siin qof “support” isku sheegaya password, OTP, screen sharing, seed phrase ama remote access. Binance Wallet seed phrase iyo exchange account password waa laba wax oo kala duwan, laakiin labaduba waa sir aan cidna loo dirin.

Ilaali email-ka iyo password-ka

Sawir dhab ah oo ka yimid Binance Academy. Waa khariidad mawduuc; settings-ka saxda ah waxa lagu xaqiijiyaa Security page-ka akoonkaaga.

Samee password dheer oo Binance keliya loo isticmaalo. Ha ku celin email, bank, social media ama exchange kale. Password manager lagu kalsoon yahay wuxuu kaa caawin karaa unique password iyo domain sax ah.

Email-ka diiwaangashan wuxuu heli karaa alerts iyo recovery requests, sidaas darteed:

• u samee password gaar ah;
• ku dar 2FA u gaar ah email-ka;
• hubi recovery options-ka iyo forwarding/filter rules;
• ka saar devices iyo app passwords aadan aqoon;
• ha ku kaydin Binance password iyo recovery code isla email inbox-ka.

Browser bookmark aad adigu samaysatay ama app store listing rasmi ah ka fur Binance. Search ad, DM ama QR aan la filayn ha ka gelin. Domain-ka akhri kahor password ama passkey prompt.

Passkey mise Authenticator

Sawir dhab ah oo ka yimid Binance Security. Account details waa la qariyay; Passkey support-ka iyo verification methods-ku waxay ku xiran yihiin device-ka iyo akoonka.

Passkey

Passkey wuxuu isticmaali karaa device lock, biometrics, password manager ama hardware security key. Binance waxay hadda sheegaysaa in Passkeys loo adeegsan karo 2FA inta badan account functions-ka iyo devices-ka ku xiran. Faa'iidada ugu weyn waa phishing resistance marka browser/device-ku xaqiijiyo domain-ka saxda ah.

Laakiin qorshee recovery-ga: passkey hal laptop ku kaydsan wuxuu noqon karaa dhibaato haddii laptop-ku lumo. Ogoow in passkey-gu sync yahay iyo in kale, halka laga maamulo, iyo device kale oo aad ku geli karto.

Authenticator app

Authenticator wuxuu abuuraa time-based code oo aan SMS network ku xirnayn. Ku rakib device aad maamusho, kaydi setup/recovery material meel offline oo sugan, kadib tijaabi login-ka kahor intaadan lacag gelin.

SMS ama email code

Waxay noqon karaan qayb verification ah, laakiin SIM swap, email compromise iyo message forwarding ayaa khatar leh. Haddii Passkey ama Authenticator kuu furan yahay, ha ka dhigin SMS/email difaaca keliya.

Doorashadu ma aha mid mar walba isku mid ah. Ujeeddadu waa laba jid oo madax-bannaan: mid maalinle ah iyo mid recovery ah, adigoon labadaba ku lumin hal telefoon.

Kaydi recovery-ga adigoon hal meel ku tiirsanayn

Qor waxa aad dhab ahaan u baahan tahay haddii telefoon ama laptop lumo:

• password manager recovery;
• authenticator backup ama setup material haddii app-ku bixiyo;
• hardware security key labaad haddii aad isticmaasho;
• passkey-ga ku kaydsan devices/providers-ka;
• email recovery iyo provider support path;
• Binance account identifiers aan sir ahayn iyo official support entry.

Recovery code, QR setup secret ama seed phrase ha sawirin oo ha ku reebin gallery/cloud aan la ilaalin. Offline copy ku kaydi meel aan la mid ahayn device-ka maalinlaha ah. Tijaabi recovery plan-ka adigoon security factor muhiim ah tirtirin.

Marka aad factor cusub samayso, ha tirtirin kii hore ilaa login cusub si guul leh loo tijaabiyo oo recovery-ga la xaqiijiyo. Security changes qaarkood waxay keeni karaan withdrawal restriction ku meel gaar ah; live notice-ka akhri, hana isku dayin inaad hareer marto.

Samee anti-phishing code si sax ah

Anti-phishing code waa eray ama isku-dar aad dejiso oo Binance ku darto emails-keeda rasmiga ah. Haddii code-ku email-ka ka maqan yahay ama khaldan yahay, fariinta u qaado mid shaki leh. SMS ha u qaadan mid la xaqiijiyay kaliya sababtoo ah wuxuu muujinayaa qoraal la mid ah code-ka.

Ka gal Account → Security → Advanced Security → Anti-Phishing Code ama jidka live app-ku muujiyo. Dooro code aan password, OTP ama magac si fudud loo qiyaasi karo ahayn. Binance current guide-ku wuxuu qeexayaa format-ka live setup-ka; raac waxa form-ku aqbalo halkii aad tusaale ka koobiyeeyn lahayd.

Anti-phishing code ma caddaynayo in link kasta oo fariinta ku jira ammaan yahay. Fariin la xaday ama screenshot la been abuurtay code-ka way muujin kartaa. Mar walba:

• hubi domain-ka;
• app/site-ka si toos ah u fur;
• Security/Notification Center ka xaqiiji action-ka;
• ha gelin credentials bog fariin kugu geysay.

Haddii code-ka la faafiyay, beddel oo fariinta report-garee.

Nadiifi devices sessions iyo connected apps

Security page-ka ka eeg Device Management, login activity, authorized apps iyo account connections haddii ay kuu muuqdaan.

Device kasta oo aadan aqoon ka qor magaca, waqtiga iyo location/IP indication kahor revoke, si aad dhacdada u diiwaangeliso. Kadib revoke oo beddel credentials haddii calaamaddu dhab tahay. Location-ka IP mararka qaar wuu khaldi karaa, sidaas darteed isku dar waqtiga, device type iyo ficillada kale.

Ka saar browser extensions aan loo baahnayn, gaar ahaan kuwa akhriyi kara bog kasta ama clipboard-ka. Operating system, browser iyo Binance app cusboonaysii. Device rooted/jailbroken ama software aan la hubin ha u adeegsan akoon lacag leh.

API key, trading bot ama third-party app kasta wuxuu yeelan karaa permissions u gaar ah. Haddii aadan hadda isticmaalin, disable ama delete adigoo raacaya live interface-ka. “Read only” iyo “trade” iyo “withdrawal” isku khatar ma aha.

Xaddid withdrawal iyo API access

Withdrawal whitelist/address management haddii akoonkaagu taageero waxay xaddidi kartaa halka lacag loo diri karo. Ka hor enable:

1. address-ka ka qaado receiving wallet-ka rasmiga ah;
2. hubi asset, network iyo Memo/Tag;
3. samee small test marka ku habboon;
4. akhri waiting period ama security restriction live-ka ah;
5. address label-ku ha noqdo mid kuu cad laakiin aan sir badan muujin.

Whitelist ma sixi karto wrong network ama address qof weeraraya hore ugu daray. Mar kasta confirmation screen-ka dib u akhri.

API keys-ka ku xaddid permissions-ka ugu yar, IP whitelist haddii workflow-ku taageero, oo ha siin withdrawal permission haddii aan si adag loo baahnayn. Secret key mar la muujiyo sida password ula dhaqan; ha ku dhejin chat, screenshot, code repository ama browser extension.

Marka telefoonku lumo ama 2FA xirmo

Telefoon lumay, wax kale oo shaki leh ma jiro

SIM-ka la xiriir provider-ka, device-ka remote lock samee haddii aad awooddo, email-ka iyo password manager-ka hubi, kadib device kale oo trusted ah ka gal. Passkey ama authenticator recovery-gaaga isticmaal. Security factor ha reset-gareyn adigoon official flow-ka hubin.

2FA code ma shaqaynayo

Hubi waqtiga device-ka, authenticator entry-ga saxda ah iyo in code-ku ka tirsan yahay account-kan. Isku dayo badan ha samayn. Haddii recovery loo baahdo, isticmaal option-ka ku jira login/security flow-ka rasmiga ah.

Unknown device ama withdrawal alert ayaa jira

U qaado incident firfircoon. Device nadiif ah isticmaal, email-ka marka hore adkee, sessions/APIs revoke, withdrawal activity kaydi, oo official support la xiriir. Ha sugin “bal inuu mar kale dhaco.”

Fake support wuxuu dalbanayaa degdeg

Ha jawaabin, hana riixin link. Binance Verify ama official Support Center ka hubi channel-ka haddii loo baahdo. Anti-phishing code waa calaamad dheeraad ah oo keliya.

Hubinta ugu dambaysa kahor lacag gelinta

Akoonku diyaar ayuu u dhow yahay marka password-ka iyo email-ku gaar yihiin, Passkey/Authenticator la tijaabiyay, recovery-ga ka madax-bannaan yahay hal device, anti-phishing code la aqoonsan karo, devices/API keys la nadiifiyay, withdrawal controls-na la fahmay.

Samee tijaabo aan lacag dhaqaajin: logout/login, notification check, Security page review iyo official support entry bookmark. Kadib lacag gelinta koowaad ha noqoto qaddar yar oo aad awooddo inaad raadiso.

Haddii incident hore jiro, “checklist complete” ma baabi'inayo. Marka hore caddee sessions, devices, APIs, withdrawal addresses iyo transaction history.

Ilaha rasmiga ah

• Binance: sida Passkey loo sameeyo
• Binance: Anti-Phishing Code
• Binance Academy: Secure Your Account
• Binance Support: Authenticator 2FA

Amniga buuxa lama dammaanad qaadi karo. Qofna ha siin password, OTP, passkey prompt, API secret ama recovery material. Maqaalkani waa waxbarasho guud; ma aha talo sharci ama dammaanad ka dhan ah khasaaraha.