Bitget security features: how your funds are protected
Bitget offers cold storage, 2FA, an anti-phishing code, withdrawal whitelists, proof of reserves and a Protection Fund for certain breaches.
Vahe HakobyanEditor-in-chief
Updated Oct 6, 20263 min readFact-checked
On this page
- Cold storage keeps most keys offline, but it is not immunity.
- 2FA and whitelists reduce unauthorized transfer risk.
- Proof of reserves shows assets, not full solvency.
Bitget holds your crypto for you, so the company controls the keys. Its security features lower unauthorized access risk.
What security features does Bitget offer?
Bitget says it keeps most customer crypto in offline cold storage wallets. Cold storage keeps keys offline, so online breaches do not directly expose them. Two-factor authentication, or 2FA, adds a second check for logins and withdrawals. An anti-phishing code marks genuine messages, and a withdrawal address whitelist limits sends to approved addresses.
How does Bitget prove it holds my crypto?
Bitget publishes proof of reserves reports that use a Merkle tree. A Merkle tree combines account balances into hashes, so totals can be shown without revealing individual users. You can compare your balance with the published totals. A proof of reserves does not prove solvency, and the report shows assets Bitget says it holds, not its liabilities.
What is the Bitget Protection Fund?
Bitget says its Protection Fund can reimburse losses from certain security breaches, such as a hack of the exchange. It does not cover market drops or losses you cause yourself.
How can I secure my Bitget account?
Bitget lets you review the devices signed in to your account. You can remove sessions you do not recognize and restrict each API key to the permissions it needs.
- Review signed-in devices and remove unknown sessions
- Limit each API key to the permissions it needs
Frequently asked questions
Bitget's terms have said it does not offer accounts to US residents, so a US beginner usually cannot open one.
Open your security settings, choose two-factor authentication and link an authenticator app. Bitget asks for its code at login and at withdrawal.
Change your password, revoke active sessions and contact Bitget through the official app or site. Staff will not ask for your password or 2FA code through private messages. Do not let anyone take remote control of your computer.
