The Yubikey doesnt have to be a stand alone and could supplement googles 2fa, I already have my google account set to use a Yubikey so I guess I already kindo of have that protection. I do like the idea that any new address has a time lag to send to it but again that option should be optional and the time limit should be optional as well. On top of that if a withdrawal request is made I would like to see an email from Ndax that asks is this you? and then have someway to deny it if it is within a half hour window. Maybe a text to your phone that you then email back the confirmation number or something? I am just thinking outside the box as there is a lot at stake here.
Bronze Fries
•
Aug 11, 2025
Note that you can already use Yubikey to store the NDAX 2FA secret.
Personally, I would like the following:
1) Video liveness checks for withdrawals rather than admin holds. E.g, sumsub
2) Strong address whitelisting with a time-gate: You set a list of “allowed” addresses and can only withdraw to those addresses. Adding addresses has a 48 hour lag.
3) A “Withdrawal password”: You set a separate password that must be entered on WD requests. This allows you to keep this high-risk action segmented.
4) A custom-set daily withdrawal limit:
You pick $10k and then you can only withdraw $10k per day. You can increase that limit, but only with a 48 hour lag. I would not personally use this, but I think it would be useful and easy to do.
Purple Mustard
•
Aug 11, 2025
I think these measures will help. However, they do add a layer of inconvenience for customers, even as they increase some security. A YubiKey, offered as the sole 2FA option for those who choose it, would provide substantially greater security without sacrificing convenience.
I would like to suggest a couple of security features for NDAX that would enhance user safety and align with industry standards:
Passkey Support (e.g., YubiKey): Implementing the ability to use a passkey, such as a YubiKey, for login authentication would be a significant upgrade. Many major exchanges already offer this option, and it would be great to see NDAX follow this path.
Dual Two-Factor Authentication for Transactions: When transferring funds out of NDAX, it would be beneficial to have the option for a combination of two-factor authentication methods. For example:
Authentication code + email code
Email code + passkey
Exchanges like Binance, Bybit, and Coinbase already offer similar features to enhance transaction security.
Thank you for considering these suggestions, and I wish you a wonderful New Year!
This request was merged into another request
Comments7
Amethyst Bagel
Aug 19, 2025
The Yubikey doesnt have to be a stand alone and could supplement googles 2fa, I already have my google account set to use a Yubikey so I guess I already kindo of have that protection. I do like the idea that any new address has a time lag to send to it but again that option should be optional and the time limit should be optional as well. On top of that if a withdrawal request is made I would like to see an email from Ndax that asks is this you? and then have someway to deny it if it is within a half hour window. Maybe a text to your phone that you then email back the confirmation number or something? I am just thinking outside the box as there is a lot at stake here.
Bronze Fries
Aug 11, 2025
Note that you can already use Yubikey to store the NDAX 2FA secret.
Personally, I would like the following:
1) Video liveness checks for withdrawals rather than admin holds.
E.g, sumsub
2) Strong address whitelisting with a time-gate:
You set a list of “allowed” addresses and can only withdraw to those addresses. Adding addresses has a 48 hour lag.
3) A “Withdrawal password”:
You set a separate password that must be entered on WD requests. This allows you to keep this high-risk action segmented.
4) A custom-set daily withdrawal limit:
You pick $10k and then you can only withdraw $10k per day. You can increase that limit, but only with a 48 hour lag. I would not personally use this, but I think it would be useful and easy to do.
Purple Mustard
Aug 11, 2025
I think these measures will help. However, they do add a layer of inconvenience for customers, even as they increase some security. A YubiKey, offered as the sole 2FA option for those who choose it, would provide substantially greater security without sacrificing convenience.
Purple Apple
Aug 8, 2025
Yes, yes, yes, and… yes please!
kardanokid
Aug 5, 2025
+1 for passkey
Tan Peach
Dec 28, 2024
•Merged request
•2 votes
adding an option for a pass key
I would like to suggest a couple of security features for NDAX that would enhance user safety and align with industry standards:
Passkey Support (e.g., YubiKey):
Implementing the ability to use a passkey, such as a YubiKey, for login authentication would be a significant upgrade. Many major exchanges already offer this option, and it would be great to see NDAX follow this path.
Dual Two-Factor Authentication for Transactions:
When transferring funds out of NDAX, it would be beneficial to have the option for a combination of two-factor authentication methods. For example:
Authentication code + email code
Email code + passkey
Exchanges like Binance, Bybit, and Coinbase already offer similar features to enhance transaction security.
Thank you for considering these suggestions, and I wish you a wonderful New Year!
Blush Sand
Feb 18, 2025
+1 for passkey