Setting up address whitelisting

Whitelisting restricts withdrawals to addresses you have pre-approved. Even someone with full access to your account cannot send funds anywhere else.

Setting it up

1. Go to Profile → Security → Withdrawal Whitelist.
2. Turn it on.
3. Add the addresses you regularly withdraw to, each with a label.
4. Confirm each with 2FA.

The delay on new addresses

A newly added address cannot be used for 24 hours. That delay is the entire protection — an attacker cannot add their own address and drain the account immediately, and you have time to notice.

Worth it?

If you hold a meaningful balance, yes. It is the single most effective protection after 2FA.