2FA / MFA options
in progress
C
Carl
Hi all,
Thanks everyone for raising this, we completely understand the frustration.
We know that 2FA/MFA is a standard security expectation, and the length of time this has been requested without a visible rollout has understandably been disappointing. This feature is still on our internal roadmap and is marked as in progress, but we also recognise that progress has been slower than it should have been.
In the meantime, one option is to choose to sign in via Google. If you have 2-step verification enabled on your Google account, that additional protection also applies when using Google to log in to Koinly. That said, we’re very aware this is not the same as having native 2FA/MFA directly on Koinly accounts, and we will continue to work on it.
If you already have an account, you can add Google as a sign-in method from the Settings → Account Settings page:
https://support.koinly.io/en/articles/10851399-how-do-i-change-my-email-address-or-login-method
V
Violet Reptile
Carl Thanks for the update on this. I actually did just that using Google account as the login that has 2FA. This issue was more complex before you offered the option to change an email / password login from that to a google account. Everytime i attempted to use google as my login choice it told me i was using the email process instead. for those that dont know, you can go to your account settings page and change the login from email type to google account which is as Carl said "about " the same
I
International orange Scallop
Its great to have a response from Koinly but I don't think this is really given the priority it should be from Koinly as a co working within the Crypto space. They are prime targets for attack and as history has taught us.... :( Good to know there is a google workaround
G
Grateful Porpoise
It's good that there is one workaround for those who use the same Google email. Unfortunately I'm using a completely unique email address for Koinly access. While that does offer me personally some extra anonymity, there are still plenty of attack vectors which 2FA would negate. And it's really not great for those who don't use Google or unique emails and have had their emails leaked in the pervasive hacks that seem to plague most platforms. I'd almost suggest pausing all other development activity to get this rolled out, considering it's your customer's and their families lives potentially at stake. I'm sure 99% of us would understand and appreciate a short pause in development to get this over the hill.
W
Weekly Barnacle
Carl
As others have said, crypto is riddled with scams and hacks.
By not mandating or prioritising 2FA, Koinly is leaving a lot of users exposed. Without strong authentication, attackers can target accounts via credential stuffing, phishing, SIM swapping...
It also raises questions about backend security. If protecting user accounts isn’t a priority, there is a real risk that API keys, wallet addresses, or sensitive transaction data could be easier to access.
It’s not a stretch to assume Koinly will be a target because of these gaps...
P
Papaya whip Ladybug
Why is there no 2FA/MFA? Please update this immediately.
S
Silver Amphibian
I think there is some other serious problem. Koinly can do this in a day, but pending for 4 years.
L
Lovely Gibbon
Post is from 2021.
Crazy. This tells a lot. 4 years and still no 2FA, are they actually giving a shit?
J
Jasmine green Chickadee
Wild that this hasn't been implemented on a paid financial platform.
F
Fellow Weasel
As far as I can tell, this is the highest voted feature. And it's been there for exactly four years. I've implemented 2FA myself. It's not that hard. What's the hold up?
G
Gradual Ostrich
C'mon - 4 years later. Joke. $5 wrench attack risk to your customers, and honeypot of your own making.
Act right! Do it Now as so many of us have asked.
No more excuses, action!
S
Salmon Pike
Hello team, can you provide an update on the progress here? Thank you.
I
International orange Scallop
How is this not a thing already on a crypto app of all things... we are all just sitting ducks
Jack
Merged in a post:
Passkey/2FA- anything else selecting pictures
C
Carmine Piranha
please add passkey- I had to go though 5 screens of selecting boxes its 2025 soon
Load More
→