What Is 2FA (Two-Factor Authentication)?
2FA, or two-factor authentication, is a security measure that requires two different types of verification before granting access to an account. Instead of relying on a password alone, 2FA adds a second factor — such as a one-time code from an app or a hardware key — so that a stolen password isn't enough for an attacker to get in.
2FA is widely used on crypto exchanges and online accounts. It's a cornerstone of basic account security, especially for custodial platforms that hold your funds.
The Three Factors of Authentication
| Factor | Description | Examples |
|---|---|---|
| Something you know | Knowledge | Password, PIN |
| Something you have | Possession | Phone, authenticator app, hardware key |
| Something you are | Inherence | Fingerprint, face scan |
2FA combines any two of these categories.
Common Types of 2FA
Authenticator apps — generate time-based one-time codes (e.g. Google Authenticator, Authy). More secure than SMS.
Hardware security keys — physical devices (e.g. YubiKey) that are very phishing-resistant.
SMS codes — texted one-time codes; convenient but vulnerable to SIM-swap attacks.
Biometrics — fingerprint or face recognition on a device.
2FA on Exchanges vs Self-Custody Wallets
On a custodial exchange, 2FA protects your account login because the platform holds your funds. In self-custody, security works differently: there's no central account to log into — control comes from your private keys and recovery phrase. Protecting those, plus your device (with a PIN or biometrics), is what keeps a non-custodial wallet secure.
Best Practices for 2FA
Prefer authenticator apps or hardware keys over SMS.
Never share one-time codes with anyone.
Keep backup codes stored securely offline.
Be alert to phishing sites that try to capture both your password and 2FA code.
2FA and Trust Wallet
As a non-custodial wallet, Trust Wallet doesn't use a central account login the way an exchange does — your security comes from controlling your own keys and recovery phrase. You can protect access to the app on your device with a passcode and biometrics, and you should always safeguard your secret recovery phrase offline. Across 100+ blockchains, the foundation of your security is self-custody: only you hold the keys.
