How to best secure your Shakepay account
Your Shakepay account holds your money and digital assets, so it’s worth taking a few minutes to review your security settings. Here are the most important steps you can take today.
Editor’s note: This article was originally published in October 2018 and updated in August 2026.
Your Shakepay account holds your money and digital assets, so it’s worth taking a few minutes to review your security settings. Here are the most important steps you can take today.
Turn on the strongest sign-in method available
Shakepay protects all accounts with two-factor authentication (2FA). SMS-based 2FA is enabled by default, and Shakepay recommends switching to an authenticator app such as Google Authenticator or Microsoft Authenticator.
In the Shakepay app, go to Settings → Security & privacy to enable an authenticator app. Codes expire every 30 seconds. See the TOTP setup guide.
Add a passkey
Passkeys are a modern sign-in option that uses your device’s biometrics, device PIN, or a physical security key. They are designed to resist phishing.
To add one, open the Shakepay app and go to Settings → Security & privacy → Passkeys. Availability varies by device. Review your recovery options before removing your password.
See Account security at Shakepay.
Use your device lock
Lock your phone and the Shakepay app with the strongest device option available to you, such as Face ID, fingerprint or other biometric unlock, a device pattern, or a PIN. Keep your device and operating system up to date.
Implement strong password security
Create a long, random, unique password for Shakepay. A password manager can generate and store it for you.
Do not reuse your Shakepay password on another service. Protect your password manager with a strong master password and multi-factor authentication where available.
Turn on email confirmations for outgoing cryptocurrency transactions
Enable email confirmations for crypto withdrawals. If you joined Shakepay recently, email confirmations are enabled by default. Approve only withdrawals that you initiated.
If you receive an unexpected confirmation request, do not click the link. Open the Shakepay app directly and review the transaction.
Protect the email account connected to Shakepay
Your email account is part of your account-recovery path. Protect it with a passkey or security key when available, or with an authenticator app.
Keep your recovery methods current and secure, and store backup codes somewhere safe. Never share your email password, Shakepay password, or verification codes.
If your email provider still uses security questions, use unique answers that cannot be guessed from public information and store them securely. Stronger recovery methods are preferable when available.
Watch for phishing
Shakepay will never ask for your password or 2FA code, ask you to share your screen, ask you to move cryptocurrency, or ask you to connect a wallet through an unexpected message.
If you are unsure about a message, open the Shakepay app directly and contact support through Settings → Help → Support chat. Read How to spot phishing attempts.
Take all the steps you can
Digital assets are not CDIC or CIPF-insured deposits like your cash or USD. Protections and custody arrangements can differ, so review Shakepay’s current Security page rather than assuming that bank-deposit protections apply to every balance.
It’s important to take all the steps you can to secure your account.
Choose a storage setup you understand
For larger or longer-term balances, some people choose self-custody. Others keep assets in a hosted account for convenience. Each setup has different responsibilities.
If you use a hardware or software wallet, protect your recovery phrase, keep backups private and offline, verify addresses carefully, and understand how you would recover access. Consider starting with a small test transaction before moving a larger amount.
If something looks wrong
Stop and do not approve transactions or share verification codes. Open Shakepay directly and review your account activity.
If you use a password, change it through the official app or website and secure your email account as well. Always contact Shakepay through in-app support, not through contact details in a suspicious message.