Using Vaults and Whitelisting
If you HODL, you should consider using a Vault. Vaults require multi-email approval to start a withdrawal, and the withdrawal itself has a 48-hour time delay, during which you can cancel the withdrawal at any time if you change your mind or if the withdrawal was initiated by an unauthorized party. You can create a vault for any supported cryptocurrency by clicking + Create Vault at the bottom of your Accounts Page. Once your vault is set up, you’ll receive a notification reminding you of the required verifications and withdrawal delay.
For our Pro users, Address Whitelisting allows you to create a predefined set of cryptocurrency addresses that are allowed to accept outbound transactions from your Coinbase Pro account. Because your Pro account will only send funds to whitelisted destinations that you trust, any attempts by an attacker to send those funds elsewhere will be blocked.
We encourage all Coinbase Pro users to take advantage of this extra security feature.
In the security world, we talk a lot about the concept of “defense in depth” — the notion that no single line of defense will ever permanently keep out an attacker, so it’s important to have multiple layers of protection. By implementing the best practices described here, you can add some layers of defense to your online accounts, as well as adding additional protection for your Coinbase funds.
If you have a security concern or suspect your account is at risk, please notify us through the Coinbase Support page.
All links to third-party websites are for convenience and informational purposes only (“Third-Party Sites”). Coinbase is not responsible for the content of any Third-Party Site, and the inclusion of any link does not imply endorsement, approval or recommendation by Coinbase.
Unless otherwise noted, all images provided herein are by Coinbase.