Welcome to NDAX — please sign in to your account to access your wallet, trading dashboard, and account features. For security, we strongly recommend using multi‑factor authentication (MFA/2FA) and ensuring you log in from a trusted device.
Security is our top priority. Always ensure you are signing in via the official NDAX portal — never via links sent in emails or messages unless you verify them first. Do not share your password, 2FA codes, or recovery keys with anyone. NDAX will never ask for your password or full 2FA code via email, SMS, or support chat.
If you encounter login issues — for example, not receiving emails, 2FA code failing, or account being locked — check your spam folder, ensure your device time is accurate (for time‑based OTPs), and confirm your network connection. You may also clear browser cache and cookies, try using a different device, or disable browser extensions that may interfere with login.
NDAX supports multi‑factor authentication to provide an extra layer of protection. If enabled, you will need to input your time‑based authentication code (e.g. from Google Authenticator or a compatible app). It is strongly recommended to keep backup recovery codes in a safe place in case you lose access to your 2FA device.
In the event your account is locked due to multiple failed attempts, or if you lose access to your 2FA app, follow our account recovery or support procedures. NDAX will ask you to verify your identity, using KYC documents, proof of account ownership, or additional verification steps.
NDAX employs strong encryption, secure protocols, and regular audits to protect your data and assets. We monitor suspicious login attempts, unusual activity, and unauthorized access risks. If you ever receive an alert or email about a login you did not initiate, contact our support immediately and review your account’s activity.
Remember: your security is in your hands too. Use a strong, unique password (at least 12 characters, mixing uppercase, lowercase, numbers, and symbols), avoid reusing passwords, and consider using a hardware security key if supported. Keep your operating system, browser, and device security software up to date to reduce vulnerability to phishing or malware.
Below is additional guidance and helpful tips for troubleshooting, understanding MFA, and securing your NDAX login experience.
        1. Browser & Device Compatibility
        Use a modern browser (Chrome, Firefox, Edge, Safari). Avoid outdated or unsupported browsers.  
        Ensure JavaScript, cookies, and local storage are enabled.  
        If experiencing layout or functionality issues, try clearing the browser cache, disabling interfering extensions, or using a private/incognito window.
      
        2. Time Synchronization for 2FA
        If using a time‑based one‑time password (TOTP) app like Google Authenticator, Authy, or similar, ensure your device’s clock is synchronized (use network time).  
        If the time is off, codes may fail even though they appear correct.
      
        3. Recovery Codes & Backup MFA
        When enabling 2FA, NDAX issues backup or recovery codes. Store them offline, physically (not on your primary device), or in a secure password manager.  
        In case you lose your phone, these codes allow you to regain access to your account.
      
        4. Account Lockouts & Retry Logic
        After multiple incorrect login attempts, your account may be temporarily locked as a security measure.  
        Wait for the lock to lift (as per NDAX’s policy) or follow the account recovery process. If needed, contact NDAX support with proof of identification and account ownership.
      
        5. Suspicious Activity & Alerts
        NDAX may send login alerts or notifications when new devices access your account or when unusual activity is detected.  
        Review these alerts carefully and, if you did not initiate them, immediately change your password and contact support.
      
        6. Phishing & Security Awareness
        Always verify the website domain (e.g. `ndax.io` or official NDAX portal).  
        Beware of phishing emails or malicious sites impersonating NDAX. Never share full login credentials or 2FA codes over email, chat, or SMS to anyone claiming to be support.  
        NDAX’s official support channels will not ask for your password or full codes.
      
        7. Contact & Support
        If all else fails, you can open a support ticket via NDAX’s official support portal. Provide clear details, time of issue, username/email, and any screenshots if possible.  
        NDAX support may require identity verification (KYC documents, ID, proof of address) to resolve login problems.
      
        8. Session Management & Logout
        After login, be sure to log out if using public or shared devices.  
        Use NDAX’s session management features (if available) to view and revoke active sessions on other devices.  
        Set session timeouts and auto‑logout in your account settings for additional safety.
      
Multi-factor authentication (MFA) requires more than one proof of identity—something you know (password) + something you have (2FA device). Even if someone knows your password, they cannot log in without also having your second factor. Many attacks (phishing, credential leaks) fail when MFA is enabled.
NDAX supports time‑based one‑time passwords (TOTP) and may also support hardware security keys (e.g. U2F, WebAuthn). If hardware keys are supported, they offer strong protection against phishing. Consider enabling them if available.
During login, after entering username and password, if MFA is enabled, you'll be prompted for a time‑based code. The system may also enforce additional checks (device trust, IP detection, risk scoring) to protect your account.
Enabling MFA is strongly encouraged for all users — especially those who trade assets, hold significant balances, or use advanced trading features.