Protecting Your Copaly Account: 2FA, Passkeys & Anti-Phishing Guide
Defense-in-depth security controls to keep your funds and identity protected 24/7.
Overview
Configure Authenticator 2FA, biometric login, withdrawal allowlists, and learn how to identify official Copaly communication channels.
Enabling Authenticator 2FA
We strongly recommend using a Time-based One-Time Password (TOTP) app like Google Authenticator, Authy, or 1Password instead of SMS alone. Go to Security → Two-Factor Authentication in the Copaly app to scan your setup QR code and store your backup recovery key offline.
Recognizing Phishing Attempts
Security Alert: Official Copaly domains are strictly
copaly.com and app.copaly.com. Never enter your login credentials on links sent via unsolicited Telegram messages or fake social media accounts.
Frequently asked questions
Will Copaly support staff ever ask for my password, OTP, or 2FA code?
Never. Copaly employees will never ask for your password, PIN, SMS OTP, or 2FA code under any circumstances.
Was this page helpful?