Google Authenticator adds a second level of security between an attacker and withdrawal confirmations, password changes, API key creation, and logins by using a Time-based One-time Password Algorithm (TOTP) and HMAC-based One-time Password Algorithm (HOTP) for authenticating users.
Google Authenticator provides a six-to-eight digit one-time password which users must provide in addition to their username and password to log into Bitfinex and modify services or security settings.
Enabling Google Authenticator 2FA is a straightforward process and has a large impact on the security of your Bitfinex account.
To get set up:
1. Visit your account Account Security settings, open the Two-Factor Authentication drop-down menu and click the Setup button below Google Authenticator:
2. Next, scan the QR code with the 2FA app on your phone and enter the 6-digit pin provided by the app in the text box above Enable. If the code is correct, the enable button will be triggered automatically.
A backup code is provided right below the QR code: the Account token (Key). In case you lose access to your 2FA device, the above key will be essential for you to gain quick access to your account.
Make sure not to store a copy of this backup code in a possibly insecure place like in the cloud/email account/computer HDD/mobile phone storage etc. Either don't make a copy of the 2FA secret or write down or print a copy of the account token (key)/QR code and store it in a safe location. Delete any digital copy after printing.
3. Upon entering the right code, you should receive the following message:
4. You should then receive an email like this:
Open the link in the same browser which you used to log into Bitfinex and you will receive the following notification:
Just like that, Google Authenticator is installed on your account. The Google 2FA codes will now be required whenever you log in, withdraw or change critical account settings.
If any of the above steps fail, or if you happen to see any error notifications returned, please get in touch with Bitfinex Support and describe the error in as much detail as possible.