Buying & ExchangesBeginner

Coinbase security features: what they cover and what they do not

Coinbase offers passkeys, security keys, login alerts, and withdrawal safeguards, but crypto is not FDIC-insured; cash may qualify at partner banks.

Vahe HakobyanEditor-in-chief Updated Oct 6, 20263 min readFact-checked

Illustration: World-Crypt

On this page

Which account protections can I enable?What withdrawal safeguards does Coinbase offer?Are Coinbase balances insured?How is Coinbase different from a wallet?FAQ

Short answer

Coinbase offers security features for your account and for the crypto it holds. They include login protections, withdrawal safeguards, and limited insurance for dollar cash. Crypto is not FDIC-insured.

Coinbase is a custodial exchange, so it holds the private keys for your crypto. You manage most protections in Settings, and it keeps most customer crypto in offline cold storage.

Which account protections can I enable?

Coinbase offers multi-factor authentication, passkeys, security keys, and biometrics. You can turn on login alerts for new sign-ins. Settings lets you review active devices and sessions and change security preferences.

Account security checklist

Open your security settings.
Review active devices and sessions.
Remove sessions you do not recognize.
Turn on multi-factor authentication or a passkey.
Check that login alerts are on.

What withdrawal safeguards does Coinbase offer?

Coinbase uses withdrawal allowlists to slow down unauthorized sends. You approve an address before it can receive funds, and new allowlisted addresses usually wait. Coinbase introduced a Vault system in 2014 that added delays and email approvals, but it has been retired; allowlists now serve a similar purpose.

Add trusted addresses to your withdrawal allowlist.
Expect a wait before a new address can receive crypto.
Confirm the address and network before you approve it.
Use a security key or authenticator app for withdrawal approvals.

Are Coinbase balances insured?

Dollar cash may be FDIC-insured through partner banks, but crypto is not. In 2014, Coinbase bought insurance for bitcoin held on its servers. Commercial crime insurance may cover some external hacks, but not your own mistakes, such as sending to a wrong address.

What Coinbase protections cover
Protection	Dollar cash	Crypto
FDIC insurance	May cover through partner banks	Not covered
Commercial crime insurance	Not applicable	May cover some hacks
Your own mistake	Not covered	Not covered

How is Coinbase different from a wallet?

Coinbase is a custodial service, so it holds the private keys and keeps most crypto in offline cold storage. A self-custody wallet, such as a hardware wallet, keeps the keys on a device you control.

Frequently asked questions

Change your password, revoke sessions you do not recognize, and turn on a stronger second factor. Contact Coinbase through the official app or website, not a link in a message.

Usually no. Coinbase reviews losses case by case, and its terms do not promise a refund for customer losses. If a breach of Coinbase itself caused the loss, its commercial crime insurance may come into play.

Passkeys are usually more phishing-resistant because they are tied to your device or biometrics, while authenticator codes can be typed into a fake site. Both are stronger than SMS codes.

Yes. Coinbase supports hardware security keys as a second factor. The key proves it is you without a one-time code, so a stolen password alone is not enough.

Was this guide helpful?

Written byVahe HakobyanVahe Hakobyan is the editor-in-chief of World-Crypt. He covers bitcoin, markets and regulation, and leads the newsroom that fact-checks every story before it goes live.