How can I secure my Bitpanda account?

 

What we do for your security

Your security matters deeply to us, which is why we protect your funds using strict, industry-leading safety standards. The vast majority of every supported cryptocurrency is held in offline cold storage, while cash balances are kept in segregated accounts with regulated partner banks. Non-crypto assets are held with specialised custodians, and all platform data is safeguarded by ISO-certified encryption and continuous 24/7 monitoring.

1 | Cold Storage

Every cryptocurrency supported on Bitpanda is secured using offline cold storage, meaning these funds are completely disconnected from web servers and internet access. No cryptocurrency is excluded from cold wallet protection.

🔒Cold Storage Split

The vast majority of reserve funds for every cryptocurrency is stored offline in high-security cold wallets.

⚡Hot Storage Liquidity

Only a small operational percentage across supported cryptocurrencies is kept online in secure hot wallets. This small fraction exists solely to ensure instant processing for day-to-day user trading and withdrawals.

While cold storage covers the vast majority of our crypto assets, certain operational portions and other product categories are held under different security models:

Index-Only Coins

Cryptocurrencies within the Bitpanda Crypto Index (BCI) that are not natively supported with a standalone wallet cannot be held, deposited, or withdrawn via individual cold wallets. These are explicitly labeled as Index-Only coins within the BCI view.

Stocks, ETFs & ETCs

Traditional financial instruments and fractional securities are held in regulated custody accounts with professional bank custodians via Bitpanda Financial Services.

Physical Metals

Gold, silver, platinum, and palladium are held as physical bullion in a high-security vault facility in Switzerland (managed by Brink's).

Fiat Balances

EUR, GBP, USD, and other fiat balances are held as E-Money issued and managed by Bitpanda Payments and partner banks.

2 | Session management

Login attempts from new devices must be confirmed by email from your registered email address. See active devices and sessions, log out and close a running session via another device.

3 | ReCAPTCHA

ReCAPTCHA helps guard your account from unauthorised access.

4 | Confirmation emails

Confirmation emails add another security layer to your account, especially on critical actions like sending cryptocurrencies or fiat withdrawals.

5 | Spot checks

On important data changes like email address, mobile phone number, or two-factor Authentication (2FA) resets, we may contact you personally by phone to validate the changes.

6 | DDOS & SSL

We also offer DDOS protection and SSL encryption.

 

What you should do for your security

Protecting your account is a shared responsibility, and you play a key role in keeping your funds safe. We strongly recommend taking the following proactive steps to secure your account and assets:

1 | Secure password

Choose a secure, unique password, that you use nowhere else.

Tip: The coloured bars, when creating the password, serve as an indicator of how secure we estimate your password. Please make sure that the bars are at least green.

2 | Two-factor authentication (2FA)

Activate two-factor authentication (2FA) for your Bitpanda account.

Tip: Your email provider may offer the option to secure your email account with two-factor authentication (2FA). This is independent of Bitpanda but adds another security layer to your emails and, therefore, to your Bitpanda account.

3 | Anti-Phishing Code

Set up a personalised anti-phishing code, so you know every communication you receive from us is genuine.

Tip: If you ever receive a suspicious looking email, you can request your APC from us at any time to verify it's genuine.

Account Security Guidelines

Please review the following security measures to protect your account and digital assets:

Password ConfidentialityBitpanda will never ask you for your account password. Never share your login credentials with anyone.
Registered Email AddressAlways contact support from your registered email address. For security reasons, account modifications cannot be processed from unverified addresses.
Private Keys & Hard ForksBitpanda securely manages user private keys, which cannot be exported. If you wish to hold your own keys or participate in unannounced blockchain forks, please transfer your assets to an external wallet whose private keys you control.
Two-Factor Authentication (2FA) BackupAlways save your 2FA recovery code or download and safely store the PDF containing your QR code in case you lose access to your device.
Network & Device SafetyAvoid logging into your account using unknown computers or public Wi-Fi networks to prevent credential hijacking.
Account Security Checklist

Mark off these key steps to verify your account protection: