Two-Factor Authentication (2FA)

Two-Factor Authentication (2FA) is an essential security feature that helps protect your account from unauthorized access. It requires two verification steps:

Something you know: Your password
Something you have: A one-time code sent to your email or generated by an authenticator app

Even if someone obtains your password, they won’t be able to access your account without the second verification step.

How We Use 2FA

To keep your account secure, we use Two-Factor Authentication (2FA) by default, with an authenticator app (such as Google Authenticator) as the recommended method. This is the most secure way to protect your account.

In some non-critical situations, we offer email-based 2FA as a backup. However, email-based 2FA is less secure than using an authenticator app, as email accounts can be vulnerable to phishing and other threats.

For any critical actions or sensitive account access, 2FA via Authenticator App is always required. 2FA provides an extra layer of security to help protect your funds and sensitive information. Need an Aunthenticator App? You can find more information HERE.

Frequently Asked Questions

Why do I need two-factor authentication?

2FA strengthens account security by requiring both your password and a unique code generated by an authenticator app or sent to your email. This dual-layer approach makes it far harder for unauthorized users to gain access.

How does 2FA protect your account?

2FA works by combining two types of verification—typically your password and a time-sensitive code. Even if someone steals your password, they cannot access your account without the second factor. This dramatically reduces the risk of unauthorized access and helps secure your sensitive data.

Why is 2FA important?

2FA significantly lowers the chance of someone breaking into your account—even if your password is exposed. It adds a critical security layer around your personal and financial data.

What makes 2FA different from other security measures?

2FA is more secure than passwords alone because it requires a second, independent verification step. This two-layered approach makes unauthorized access much harder, even if your password is compromised.

How reliable is 2FA?

2FA is widely recognized as a highly effective security measure. While no system is entirely immune to attack, using 2FA greatly reduces your exposure to common threats like phishing, credential stuffing, and brute-force attacks.

What 2FA methods are supported?

Authenticator apps
Email verification

What about using authenticator apps? Are they more secure than mobile or email notifications?

Yes. Authenticator apps generate verification codes on your device and are not transmitted over a network, making them more resistant to SIM swapping and interception. They’re generally more secure than SMS or email-based 2FA.

If my account is hacked, could hackers share my 2FA information like they do with passwords?

Not easily. 2FA codes are short-lived and unique to your device, making them difficult to reuse or share like passwords. Once they expire in 10 minutes, they’re no longer valid.

Can hackers steal my 2FA codes without hacking my account?

While rare, phishing and social engineering can trick users into revealing 2FA codes. Always make sure you're entering your 2FA code into a trusted source and never share it with anyone—even if they claim to be support staff.

When should I use 2FA?

Enable 2FA on all accounts that store sensitive or personal information—especially those related to email, finances, or identity. The more important the data, the more crucial it is to protect with 2FA.

Is biometric authentication considered 2FA?

Biometrics can be used as one of the factors in a 2FA process but, by itself, is not 2FA. True 2FA requires two distinct forms of verification—biometric plus password, for example.

What happens if I lose access to my 2FA device?

Reach out to our support team at support@chintai.io as soon as possible to begin the account recovery process.
You’ll be guided through a secure identity verification procedure by our customer service team.
After your identity is confirmed, we’ll provide you with the next steps to safely restore access to your account.

What happens if I lose access to my email, phone, or authenticator app?

If you’ve lost access to all your verification methods, contact support team at support@chintai.io to begin the account recovery process. You may be asked to verify your identity using personal information or documents.

Is 2FA required to use the platform?

2FA is mandatory to access your account and perform sensitive actions such as logging in, updating account details, or initiating withdrawals.

Can I use SMS for 2FA?

No, SMS is not supported. We only support secure methods such as authenticator apps or email. SMS is considered insecure due to the risk of SIM swapping and interception.

Why isn't SMS recommended for 2FA?

SMS-based 2FA can be compromised through SIM swapping—where an attacker tricks your mobile carrier into transferring your number to a new SIM card. This allows them to intercept your 2FA codes and access your accounts. Authenticator apps offer much stronger protection.

Will 2FA affect my ability to use platform features like trading or staking?

No. 2FA only activates during login and certain high-risk actions. It will not interfere with your normal use of trading, staking, or other platform features.

How can I reset my 2FA?

If you are able to log in to the application. You can reset your 2FA through the Settings & Privacy page. Here is a step-by-step guide on the reset:

Step 1 - Navigate to the Settings & Privacy page through the bottom left dropdown menu.
Step 2 - Navigate to the Password & Security Tab from the left nav and click on “Reset Authentication” Button. A modal to enter your current Authentication code will appear.

Step 3 - Follow the process to reset your 2FA, Log out, and log in with the new code registered.

If you are not in the platform:

Submit a reset request to our support team at support@chintai.io as soon as possible to begin the reset process.
You’ll be guided through a secure identity verification procedure by our customer service team.
After your identity is confirmed, we’ll provide you with the next steps to safely restore access to your account.