You can enhance the security of your Strike account with Two-Factor Authentication (2FA), which requires a second verification method in addition to the standard confirmation code to access your account or perform protected actions. Strike offers 2FA through passkeys, external security keys, or authenticator apps.

How to set up passkeys or security keys for 2FA:

To set up a passkey or security key for 2FA, visit your Account screen, select Security, then follow these steps

1. Tap “Enable 2FA”
2. Select “Passkey or security key”
3. Follow your device’s system prompts to set up your preferred passkey or security key

Once your passkey or security key is set up you can tap the “Manage passkeys” button to add additional keys, rename your keys, or remove a key by swiping left.

How to set up an authenticator app for 2FA

To set up an authenticator app for 2FA, ensure you have an authenticator app, such as Google Authenticator set up, then visit your Account screen, select Security, then follow these steps:

1. Tap “Enable 2FA”
2. Select “Authenticator app”
3. Pair your Strike account with your authenticator app by either pasting the provided setup key into your authenticator app or scanning the QR code.
4. Once paired, your authenticator app will generate a temporary 6-digit code, which you must use in the Strike app to complete the 2FA enabling process.

As a final step, you will be presented with a set of recovery codes. These codes let you recover your account if you lose access to your authenticator app. It’s important to store these codes securely offline, as these codes can each be used once to recover your account.

Remember, never share your 2FA codes or recovery codes with anyone. These codes are sensitive pieces of information that are used to gain access to your Strike account and should be known only to you. Strike will never ask for these codes, your PIN, password, or email confirmation code.

Managing Your 2FA Method and Protected Actions

You can change your active 2FA method between passkeys, security keys, and authenticator app at any time. This action requires authentication via your current 2FA method for security.

You also have control over which actions are protected by 2FA. By default, logging in after you've logged out will always require 2FA. Additionally, you can choose to enable 2FA for:

• Updating account information
• Initiating sends and withdrawals

Once 2FA is enabled for an action, you will be required to complete the second-factor authentication using your chosen method whenever you perform that action, including logging into the Strike Dashboard.

If you suspect unauthorized activity on your account, contact support@strike.me immediately.