Account security: passwords, 2FA and wallet changes
Your login is yours alone. These settings keep it that way.
Your profile holds your trading accounts, your identity check and your payout wallet. Use a strong password, turn on two-factor authentication and keep your login to yourself: letting someone else use your account is a hard breach.
- Password: 8 to 32 characters, unique to Fundzoria
- Two-factor: a code from an authenticator app at every sign-in
- New device: an email when you sign in from one
- Wallet change: needs 2FA, payouts pause for 48 hours
- Account sharing: hard breach
Your password
- Use 8 to 32 characters and a password you do not use anywhere else.
- After 10 failed sign-in attempts, sign-in is paused for up to 15 minutes. You can reset your password instead.
- A reset link is single-use and expires after 30 minutes. After a reset, every device signed in to your account is signed out.
- When you change your password in Profile, your other signed-in devices are signed out and we email you. With two-factor authentication on, the change also needs a code.
- Accounts created with Google sign-in can add a password in Profile to sign in with their email address too.
Two-factor authentication
- 1Install an authenticator app
Google Authenticator, Microsoft Authenticator or Authy on your phone.
- 2Start the setup in Profile
Choose Set up two-factor authentication. Scan the QR code, or enter the key shown manually.
- 3Confirm with a code
Enter the 6-digit code from the app to turn it on.
- Once it is on, every sign-in asks for a code from your authenticator app.
- Turning it off needs a current code.
- Two-factor authentication must be on before you can change a saved payout wallet.
Sign-ins and devices
- A sign-in keeps you logged in on that browser for up to 30 days and is extended while you use the site.
- Sign out ends the session on that device. Always sign out on shared devices.
- When you sign in with a combination of browser, system and country that has not signed in to your account in the last 180 days, we email you with the device, location and time.
Change your password straight away, which signs out your other devices, turn on two-factor authentication and contact support.
Payout wallet changes
| Step | What happens |
|---|---|
| First wallet | Saved straight away for payouts. Supported networks: USDT · BEP20 and USDT · TRC20. |
| Changing it | Needs two-factor authentication to be on, and a current code from your authenticator app. |
| After a change | Payouts pause for 48 hours. |
| More than 1 change in 30 days | The new wallet waits for manual verification, then is approved or rejected. Payouts wait until it is decided. |
Every payout is sent to the wallet saved when you made the request, and you get a notification at each step of a wallet change.
One profile per person
- Each person may hold one Fundzoria profile, registered with accurate personal details.
- To prevent abuse and duplicate accounts, we keep session records, your two-factor settings, a one-way hash of your IP address and a random browser identifier.
- Multiple profiles and account sharing or third-party management are hard breaches, and the profile may be restricted while the activity is reviewed.
Frequently Asked Questions
How do I turn on two-factor authentication?
Go to Profile in your dashboard, choose Set up two-factor authentication, scan the QR code with an authenticator app and enter the 6-digit code to confirm.
Why are my payouts paused after I changed my wallet?
Every wallet change pauses payouts for 48 hours. A second change within 30 days also waits for manual verification.
How long does a password reset link last?
It can be used once and expires after 30 minutes. After the reset, every device signed in to your account is signed out.
Can someone else trade my account?
No. Letting anyone else log in to, trade or manage your account is a hard breach.
Should I send support my password?
No. Never share your password or login details with anyone, including support, and never send your private keys or wallet recovery phrase. Give your account number and a description of the issue instead.