What is Two-Factor Authentication (2FA)?

Two-factor authentication (2FA) is an extra layer of security protecting your cryptocurrency and your MoonPay Account. This extra layer of security requires you to have two sources of verification to sign into your account such as your password and a six-digit authentication code that can be sent to your mobile device. Two-factor authentication helps protect you from bad actors as the second verification will be sent to your device.
At MoonPay, security is our top priority, and this added layer of protection ensures that only you can access your account, preventing unauthorized access by anyone else.

How does Two-Factor Authentication (2FA) work?

The following method is available for 2FA on MoonPay:
Text Message: A code will be sent to your mobile phone via text message.

How do I set up Two-Factor Authentication (2FA)?

You can set up Two-factor authentication in a few easy steps. We’ll walk you through them below:
Using Text Message:

1. Sign in on MoonPay with your email address and follow the steps on the screen.
2. Enter your phone number and “Continue”
3. Follow the instructions displayed on the screen.
4. Enter the authentication code
5. Your 2FA has been set up and will be requested on sensitive actions like withdrawing funds protecting your MoonPay Account.

What should I do if I lose access to my 2FA method?

If you no longer have access to your phone number please contact our support team for help.

How can I update my email address?

You can update your email address in a few steps. We’ll walk you through them.

1. Sign in to your MoonPay Account with your registered email address.
2. Go to Settings, click on Account, then click on Edit in the email address section.
3. A 6-digit code will be sent to your current email address. Enter the code to proceed.
4. Once verified, you’ll be prompted to enter the new email address for your MoonPay account.

That’s it! You will receive an email confirmation once it has been updated.

📘

Note:

1. If the new email is already associated with an active MoonPay account, you won’t be able to update your account with it.
2. If your MoonPay account is linked to Google or Apple, you cannot change your email within MoonPay. Instead, update your email through Google or Apple, and the change will reflect in MoonPay.
3. At the moment you will only be able to update your email and phone number through buy.moonpay.com.

I did not receive the email verification code.

Email codes are sent directly to the email address you enter. If you have not received the email verification code please ensure that you have entered the correct email address and check your junk and spam mail folders.
If you can’t find the email please contact your email provider for support.

📘

Note:

Email codes may take a few seconds to be received, please wait at least 5 seconds before generating a new one.

App Lock with Biometric Authentication

To help protect your account and make accessing the MoonPay app faster and more secure, we’ve introduced App Lock using biometric authentication.

What is App Lock?

App Lock automatically locks your MoonPay app after:

• You close or swipe away the app, or
• You’re inactive for more than 5 minutes

When this happens, you’ll need to re-authenticate using Face ID, Touch ID, or your device PIN to access the app again.

How does it work?

• After signing in, you’ll automatically be prompted to set up biometric authentication to enable app-lock.
• Once set up, this method will be used to unlock your app whenever it locks.
• App Lock is mandatory – you must select either biometric authentication or a device PIN to continue using the app.

You can always change your App Lock method in the Settings > App Security section of the app.

How does this improve security?

• Your biometric data is stored securely on your device, it is never processed by MoonPay or stored on MoonPay servers.
• This helps protect your account even if someone gains access to your unlocked phone.
• App Lock helps prevent unauthorized use of your MoonPay account while balancing security and convenience.

How can I adjust the timeframe required to authenticate in the app?

To help keep your account secure, our app automatically locks after 5 minutes of inactivity or when you close it completely.
This means you’ll be asked to authenticate (using biometrics or your device PIN) the next time you open the app.
You can adjust the auto-lock timeframe in your MoonPay app settings:

1. Open the app.
2. Go to Settings > Security.
3. Choose the auto-lock timing that works best for you.

Can I disable this?

Yes — you can turn off biometric authentication (Face ID, Touch ID, or similar) at any time.
To disable biometrics:

1. Open the app.
2. Go to Settings > Security.
3. Toggle Biometric authentication off.

📘

Note:

Disabling biometrics may make your account more vulnerable to unauthorized access, especially if your device is lost or stolen.
For your security, we strongly recommend keeping biometric authentication enabled.

❗️

Important Notes:

• App Lock is enabled per device – if you log in on a new phone, you’ll be asked to set it up again.
• If biometric authentication is disabled at the device level, App Lock will also be disabled in the app.
• If biometric authentication fails, you can use your device PIN as a fallback.

If you have an issue with biometric authentication, please reach out to support.moonpay.com