Keeping Your Account & Funds Secure: A Security Checklist

#Keeping Your Account & Funds Secure: A Security Checklist

Most losses in crypto come down to personal security, not platform breaches. The good news: a handful of habits cover almost all of it. This is your checklist — each item links to a full guide.

---

#The 60-Second Security Checklist

Run through these once and you've covered the essentials:

1. Turn on 2FA and save your backup codes offline. It's the biggest single improvement to your account security. → How to Set Up 2FA
2. Use a strong, unique password (at least 8 characters — longer is better) that you don't reuse anywhere else. → Account & Profile Settings
3. Review your active sessions and sign out any device or location you don't recognize. → Account & Profile Settings
4. Keep API keys trade-only. Connect keys with read and trade permissions — never withdrawal — and restrict them to Freya's IP where your exchange supports it. → Managing Your API Keys
5. Treat signal-bot webhook URLs like passwords — never post them, and regenerate them if they're ever exposed. → How to Create a Signal Bot

#Why Your Funds Have a Built-In Floor

Even if someone got into your account, two structural protections limit the damage:

• Your trading capital stays on your exchange. Freya trades through trade-only API keys, which can't withdraw — so funds can't be pulled off your exchange through Freya.
• Withdrawals are reviewed. No withdrawal of your earnings is automatic; each is manually reviewed and approved by the Freya Finance team, with rejected requests refunded.

That's the full picture in Is My Money Safe on Freya Finance? — this checklist is about keeping the account itself locked down.

#Spotting Phishing & Impersonation

Scammers imitate platforms and "support." Protect yourself:

• Bookmark the real site and check the address before logging in; watch for look-alike domains.
• Official support never DMs you first and never asks for secrets. Support is [email protected] and @FreyaFinanceSupport on Telegram. @FreyaFinanceBot is the notifications bot — not support.
• Be skeptical of urgency — "act now or lose access" is a classic pressure tactic.

#What Freya Will Never Ask You For

#If You Think Your Account Is Compromised

Act quickly to limit any damage:

1. Change your password right away (this also signs out your other sessions).
2. Review and sign out any unfamiliar sessions.
3. Make sure 2FA is on.
4. Remember the structural floor — trade-only keys and reviewed withdrawals limit what anyone can do — but still secure the account immediately. If you're locked out, see Can't Log In or Lost Your 2FA Device?.

#Go Deeper

• Crypto Bot Security Best Practices
• Exchange API Security & Risk Mitigation

#Frequently Asked Questions

#What's the single most important thing I can do to secure my account?

Turn on 2FA and save your backup codes offline. It means a stolen password alone can't get someone in, and it's the highest-impact step you can take in a minute.

#Does Freya ever need my exchange password or withdrawal permission?

No — never. Freya connects through API keys with read and trade permissions only, and it never needs your exchange password. Anyone asking for either is attempting a scam.

#How do I know if someone else has accessed my account?

Check your active sessions in Settings → Profile — each shows a device, location, and last-active time. Your activity log also records logins and key changes. Sign out anything you don't recognize and change your password.

#Are my funds safe if my Freya account is compromised?

Your trading capital can't be withdrawn from your exchange through Freya, because the API keys are trade-only — and withdrawals of your earnings are manually reviewed by the Freya Finance team. That limits the damage, but it's not a reason to relax: secure your account immediately if you suspect a problem.

#How do I keep my signal-bot webhook URLs safe?

Treat them like passwords: never post or share them, only paste them into your own trusted alert tools, and regenerate a URL immediately if you think it's been exposed (which instantly invalidates the old one).

#How can I tell a real Freya message from a phishing attempt?

Real support never messages you first and never asks for passwords, 2FA codes, or seed phrases. Use only the official channels ([email protected], @FreyaFinanceSupport), bookmark the real site, and treat urgent "act now" messages with suspicion. @FreyaFinanceBot only sends notifications — it's not support.

#Is my account "unhackable" if I do all this?

No — no account anywhere is. These habits dramatically reduce your risk, which is the realistic goal. Security is ongoing: keep 2FA on, keep your password unique, and stay alert to phishing.

For the platform-level picture — Freya's non-custodial design and overall trustworthiness — see Is Freya Finance legit and safe?