OSL Account Security and Two-Factor Authentication (2FA) Setup Guide

To safeguard your digital assets and account security against phishing and unauthorized access, OSL strongly recommends that all users complete the Two-Factor Authentication (2FA) binding and properly manage login devices before initiating deposits and trades.

This guide details how to configure and manage the core security features of your OSL account.

1. How to Enable Two-Factor Authentication (2FA)

Two-Factor Authentication (2FA) provides an additional layer of security for your account. Once enabled, every login or withdrawal will require a dynamic verification code generated by an authenticator or hardware security key, in addition to your password.

Method 1: Using an Authenticator App (Recommended)

• Step 1: Log in to your OSL account, click the Profile Icon in the top right corner, and navigate to Security Settings > Authenticator. You can add your Google Authenticator here.

• Step 2: Download and install Google Authenticator (or another compatible authenticator app) from your mobile app store (App Store or Google Play).

• Step 3: Open Google Authenticator, tap the "+" icon in the bottom right corner, and choose one of the following methods to bind:

  • Scan QR Code: Directly scan the QR code displayed on the OSL page.

  • Enter Setup Key: Manually enter the key provided on the OSL page (Account name can be customized as "OSL App", select "Time-based" for the key type, and tap [Add]).

• Step 4: Upon successful binding, the authenticator will generate a 6-digit dynamic verification code (refreshing every 30 seconds). Return to the OSL page, enter this 6-digit code, and click Confirm. The system will send a confirmation email to your registered email address, indicating that 2FA has been successfully enabled.

Method 2: Using a YubiKey Hardware Security Key

If you possess a YubiKey hardware device, you can bind it through the following steps:

• Log in to your OSL account, click Settings > Security.

• Under the [YubiKey] section, click Add.

• Insert the YubiKey into your computer's USB port and tap the sensor on the device. The system will automatically recognize and activate it.

• Once the page displays "YubiKey Id1" and you receive a confirmation email, the setup is complete.

2. How to Manage Trusted Devices (Pairing and Unpairing)

To prevent phishing attacks, OSL requires users to log in only from verified devices. Each account can bind up to 6 devices.

• Pairing a New Device: When logging in from a new mobile phone or computer for the first time, the system will send a verification code to your registered email. Enter the email verification code in the pop-up window on the login screen, followed by your 2FA dynamic verification code, to complete the pairing of the new device.

• Unpairing an Old Device: If you change devices or detect abnormal login activity, please promptly remove unused devices:

  • Via App: Click the Profile Icon > Security Settings > click Unpair next to the target device > enter the 2FA code to confirm.

  • Via Web: Click the Profile Icon in the top right corner > Settings > Security > Paired Devices > hover your mouse over the target device, click the (⋮) symbol in the top right > click Unpair > enter the 2FA code to confirm.

3. Frequently Asked Questions (FAQ)

1. How do I disable 2FA if my phone is lost or the authenticator is inaccessible?

Based on strict fund security and compliance considerations, OSL does not support users disabling 2FA independently on the front end. Please use your registered email to contact our customer service at [email protected]. Our security team will assist you in disabling it after verifying your identity.

2. What should I do if I forget my login password?

• Select "Change Password" under Security Settings in the App.

• Enter the registered email address of your OSL account and click Next.

• Retrieve and enter the One-Time Password (OTP) sent to your email. (Note: If not received, please check your spam folder.)

• If you have enabled two-factor authentication, you must simultaneously enter the 6-digit 2FA code generated by your authenticator.

• Set your new password and click Change Password.

📌 This article is part of the Complete Guide to Buying Bitcoin Safely in Hong Kong. See the full journey from account setup to your first trade.

📌 This article is part of the Complete Guide to Buying Bitcoin Safely in Hong Kong. See the full journey from account setup to your first trade.

Start your safe cryptocurrency journey now

Disclaimer