Sign in confidently
NDAX combines regulatory compliance with practical security features. When signing in, prioritize official channels, strong authentication, and awareness of phishing attempts. Below is a concise walkthrough and guidance to ensure you can access your account safely.
Quick sign-in steps
- Open the official NDAX website or the verified mobile app.
- Click Log in and enter your registered email address.
- Type your password — use a password manager for safety and convenience.
- Complete two-factor authentication (2FA) using an authenticator app or hardware token.
- Optionally, mark a personal device as trusted for fewer 2FA prompts.
- Once signed in, review your dashboard for recent activity and alerts.
Security essentials
Authenticator apps (Authy, Google Authenticator) are more secure than SMS-based codes and protect against SIM swap attacks.
Create complex passwords and store them in a reputable password manager. Never reuse passwords across services.
Where available, restrict withdrawals to pre-approved addresses to reduce the risk of unauthorized transfers.
Device hygiene
- Keep your operating system and browser up to date.
- Use a dedicated browser profile for trading to avoid cross-site exposure.
- Install trusted antivirus and avoid public or shared computers for sensitive actions.
Troubleshooting sign-in issues
Forgot password
Use the Forgot password link to receive a secure reset email. If you don’t see it, check spam/junk folders and ensure your email provider isn’t blocking messages from NDAX.
Lost 2FA device
If you lose access to your authenticator app, use your stored recovery codes. If recovery codes are unavailable, contact NDAX support and follow identity verification procedures to regain access.
Account lockouts
Multiple failed attempts may temporarily lock your account. Follow on-screen guidance, and if you suspect unauthorized access, contact support immediately and change your password from a secure device.
Email delivery problems
Ensure NDAX email addresses are added to your safe sender list. If delivery problems persist, reach out to support with alternate contact details to verify your identity.
Institutional & power-user controls
Institutions and advanced users should enable additional safeguards: IP-restricted API keys, role-based access, multisig approvals for large transfers, and scheduled security audits. Coordinate these controls with your NDAX account manager for tailored onboarding.
API security
- Limit API key scopes to necessary actions only.
- Restrict keys by IP or CIDR blocks when possible.
- Rotate keys on a regular schedule and revoke unused keys immediately.
Operational readiness
Document recovery procedures, backup key custody, and designate responsible personnel for incident response. Regular tabletop exercises reduce recovery time during incidents.