Security
Published Jun 22, 2026 · Updated Oct 16, 2026
This page covers two things: who can sign in to this account (login methods), and how you prove it is you before a withdrawal (Funding account security verification). Open it from avatar (top right) → Security.
Login methods
AlphaFox supports four login methods. You can link several and sign in to the same account with any of them.
| Method | How to link | Notes |
|---|---|---|
| Enter Email address → Send code → enter the code → Verify email | Email sign-in uses a one-time code or Magic Link | |
| Click Link and authorize with Google | Needs an email linked first | |
| X | Click Link and authorize with X | Needs an email linked first |
| Telegram | Click Link and finish in the bot chat (steps below) | Also becomes your identity for the official bot’s notifications |
Rules:
- You can Unlink a method as long as another one remains. The last remaining login method cannot be unlinked.
- A Google, X, or Telegram identity is linked to only one AlphaFox account at a time.
- Keep at least two methods so a single broken login never locks you out.
Link Telegram
You can jump straight to the Telegram section: Security · Telegram. Click Link; the Bind Telegram dialog offers two ways:
Method 1: Open Telegram (best on desktop or a device with Telegram installed)
- Click Open in Telegram. Your browser opens the official AlphaFox bot.
- If you have not chatted with the bot before, tap Start in Telegram.
- After binding in the bot chat, return to the dialog and click Check binding status.
Method 2: Send a binding code to the bot (when the link does not open, pop-ups are blocked, or Telegram is on another device)
- Switch to Use binding code, click Generate binding code, and copy the
/bindcommand. - Open a private chat with the official AlphaFox Telegram bot and send the command.
- Return to the dialog and click Check binding status.
When Telegram shows Bound, you are done. After binding:
- You can sign in to AlphaFox with this Telegram account.
- The AlphaFox Telegram notification channel is created and enabled automatically. Adjust what it sends in Notification Settings.
- You can claim the community Plus reward from Newcomer benefits (the gift icon at the top right), once per account.
The binding code expires quickly and works only in a private bot chat. If this Telegram account was linked to another AlphaFox account, a successful code verification unlinks it there and links it here. Unlinking Telegram disables its notification channel but does not change existing referral relationships.
Funding account security verification
Before a withdrawal, AlphaFox asks you to confirm it is you. Manage the methods used for that confirmation here:
| Method | How it works |
|---|---|
| Passkey (recommended) | Confirm with your fingerprint, face, or device screen lock |
| Authenticator | Confirm with the six-digit code from an authenticator app |
Add a verification method
On the Funding account security verification card, click Add verification method and pick Passkey or Authenticator.
Follow the prompt on your device
For Passkey, complete the browser or system prompt. For Authenticator, scan the QR code with your app and enter the six-digit code. When you see All set, the method is listed on the card.
Each method can be renamed (Rename) or removed (Remove). If it is your only method and email codes are not available, add another method before removing it.
Until you add a method, some actions can only be confirmed with an email code, and some—such as the first withdrawal to a new address—require a Passkey or Authenticator. The full withdrawal flow is on Funding Account.
If you lose every verification method, click Can’t verify? Recover with your email. Recovery starts a waiting period during which withdrawals are paused; the resume time is shown at the top of the card.
Avatar and username
Every User Center page shows your avatar and name at the top:
- Click the avatar → Change avatar, choose an image (JPG, PNG, WebP, or GIF), adjust it, and click Save avatar.
- Click your name to open the menu → Change username. The username replaces your email in the top bar and on account pages; your email address itself does not change.
Trading security tips
- When connecting an exchange API key, enable read and trade permissions only—never withdrawal. See Connect an Exchange.
- Where the exchange supports it, add the whitelist IPs shown in the connection dialog to your API key.
- If you suspect a key has leaked, delete it at the exchange first, then update the connection in AlphaFox.
- Turn on notifications for live strategies—at least failures and exchange errors. See Configure Notifications.