It's not easy to lose your funds, and a lot of people are trying to secure their funds, so I decided to write simple guide hopefully will be useful for people.
1. Any exchange has almost 2FA, to activate it go to settings, look for security and you should find it there
2. Before activating, make sure you download the google authenticator on your smartphone
3. When you are about to activate it, you will see on the screen barcode and above/near it also recovery code (Copy that code on piece of paper, make 2-3 copies and keep them safe)
4. Open your google authenticator app, click on + , you will see two options, scan barcode and enter a provided key (that's the code I mentioned in section
3, you will need it in the future)
5. Click scan barcode and scan the barcode you have on the exchange, then you will see on the app name of the exchange and 6 digits code that changes every 30 seconds, put the code on the exchange and confirm.
Now your account on the exchange is secured by another layer.
6. Each time you will log in the exchange you will be asked to put the code from the google authenticator app, so if anyone has your email and password he can not login .... (not yet, he still can somehow, will explain)
7. What about you gmail account? now you should also secure that part, on gmail hit the circle with you photo and click on my account
8. Or simply follow the instruction by google:
https://support.google.com/accounts/answer/185839?hl=en9. After activate your 2FA on google, make sure you backup your 2fa for gmail and get 10 codes to have the ability to login to your gmail if you lose your phone
10. now what if you lose your phone?
in the case of the exchange: you got the recovery code, you just need new phone, download the google authenticator app and add the recovery code and again you will have the digits codes on your new phone
11. For your gmail, if you did backup, you can use one of the 10 codes you got, dont save them on your laptop write them down, login then you can disable the 2FA from gmail and reactivate it.
Or if you printed out the barcode that's also an option, I would not prefer that as you might leave it behind on your laptop, same thing you can do with the barcode you see on the exchange, you can print it out and use it as recovery instead of the code mentioned in section 3.
Why you should also secure your email although you have 2FA on the exchange?
Because if you are victim of phishing website or someone put keylogger on you PC he can take your email and password, login you email, change your password and lock you our.
He will try to rest your password from the exchange and you have no way to do anything almost, if he has more information about you and the exchange give him the opportunity to disable the 2FA you lost your funds