KuCoin asks for 2FA at the moments that matter: logging in, withdrawing and changing key account settings. As its own help puts it, someone with your stolen password could otherwise trade your assets away or withdraw them — and on a blockchain that cannot be undone. With Google 2FA on, they would also need the code that only your device produces.
Turn on Google 2FA on KuCoin
KuCoin calls this “Google 2FA” and its steps name Google Authenticator, but the codes are standard time-based ones, so any authenticator that reads the QR code works. Enter the codes carefully: five wrong ones in a row lock Google 2FA for 2 hours.
- Log in to your KuCoin account at kucoin.com on your computer.
- Select your profile in the top right and choose “Account Security” → “Google Verification”.
- Select “Configure” (previously “Bind”).
- Verify it is you with your passkey, email or text message code — if the passkey fails, click “switch verification method”.
- When KuCoin shows a QR code, leave that page open and add it to the extension as described below — then enter the 6-digit code from the extension to finish.
Add KuCoin to Authenticator
- Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
- Leave the KuCoin page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
- The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
- Go back to KuCoin and type the current code into the confirmation field. If it is about to expire, wait for the next one.
- KuCoin confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.
No QR code, or it will not scan? Look for the option to enter a key manually on KuCoin’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.
Get 2FA Authenticator for Chrome — freeSave your KuCoin Google security key
KuCoin has no backup codes for Google 2FA. Instead it says to always save your security key — the key shown with the QR code — because it is what lets you relink 2FA yourself when your phone has a problem. Each time you link and unlink the authenticator you get a different key, so keep the latest one. Write it on paper and keep it away from this computer: anyone who has it can produce your codes.
The code is not accepted?
Most often the QR code changed: the website makes a new one each time its setup page is reloaded or opened again, so the account you added first no longer matches. Start the setup again, add the QR code that is on the screen now and type its code in straight away. Two entries for the same website? Use the newest. Other reasons: why codes are refused.
Typed the key in by hand? Paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.
Questions
- Can I use KuCoin Google 2FA without a phone?
- Yes. Despite the name, KuCoin’s Google 2FA is a standard time-based code (TOTP), and any authenticator that scans its QR code produces it. The Authenticator extension reads the QR code straight off the KuCoin page and generates the codes in Chrome.
- How do I move KuCoin 2FA to a new phone?
- If you saved the security key, delete the old KuCoin entry and add the key to the new authenticator — the codes carry on as before. Without the key, reset it: select “Forgot password” on the login page, click “Google Authenticator unavailable”, choose “Google Authenticator” and complete the verification, which includes identity verification photos — follow the instructions closely or the request may be rejected. If you can still log in, start from “Change” next to Google authenticator in Account Security instead.
- Is 2FA required for withdrawals on KuCoin?
- Yes — KuCoin requires 2FA for logging in, withdrawing and changing key account settings. Google 2FA is one option; KuCoin also suggests text messages and passkeys, and recommends combinations such as Google 2FA with email verification and a passkey. Withdrawals are disabled for 24 hours after you change your 2FA settings, so do it before you need to move funds.
- Why does KuCoin say my Google 2FA code is wrong?
- Check that the code comes from the entry for your KuCoin account’s email, and enter it within its 30 seconds. If you linked and unlinked the authenticator, or the setup page was reloaded, there is a new key: add the QR code that is on the screen now and use the newest entry. If 2FA was set up in another app, the codes come from that app. Five wrong codes in a row lock Google 2FA for 2 hours.
Your codes, one click from the login page
Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.
Get 2FA Authenticator for Chrome — free