CoinDCX 2FA: how to set up an authenticator app

CoinDCX is an Indian crypto exchange where you buy, hold and withdraw crypto and rupees. Two-factor authentication (2FA) is optional, but CoinDCX strongly recommends it (CoinDCX). It's separate from the one-time codes (OTPs) CoinDCX sends by email or text: 2FA codes come from an app on your phone (CoinDCX).

The setting is called Google Authenticator, but CoinDCX's help names Google's app only as an example of an authenticator app (CoinDCX). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the CoinDCX steps come from CoinDCX's own help center, linked below, which we read on October 21, 2026. We haven't tested them on a CoinDCX account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Before you start: two things that are different here

• You turn it on in the app, and you get a key, not a QR code. CoinDCX's steps start in the CoinDCX app and have you copy a Secret Key into the authenticator. They don't mention a QR code.
• INR withdrawals pause for 24 hours. Turning 2FA on or off blocks INR withdrawals for a day (CoinDCX).

Turn on 2FA with an authenticator app

CoinDCX's help describes these steps in the CoinDCX app (CoinDCX):

1. Sign in to the CoinDCX app and tap the profile icon at the top left.
2. Select Security, then tap Google Authenticator.
3. CoinDCX offers to download Google Authenticator. You don't need it: select I have downloaded.
4. Copy the Secret Key, and save a copy somewhere safe, such as a password manager (see below).
5. Open Novaz, tap +, then Enter key manually. Type CoinDCX as the Service, add your email as the Account if you like, and paste the key into Setup key. See What is a 2FA setup key?
6. Back in the CoinDCX app, enter your current password and the OTP CoinDCX asks for.
7. Enter the 6-digit code that Novaz shows for CoinDCX.

CoinDCX's codes are 6 digits and change every 30 seconds (CoinDCX), which matches what Novaz makes from a typed key.

The Secret Key is your backup

CoinDCX tells you to keep the Secret Key, because it lets you restore 2FA on a new phone without setting it up again. Its help is blunt about who should see it: "Never share your Secret Key with anyone, including someone claiming to be from CoinDCX" (CoinDCX). Anyone with the key can make your codes, so store it like a password. If you don't use Novaz's iCloud backup or a backup file, the saved key is how you'd add CoinDCX to a new phone.

Get backup codes on the website

CoinDCX also has 10 single-use backup codes, but you can only create them on the CoinDCX website, not in the app (CoinDCX). To get them (CoinDCX):

1. Sign in on the CoinDCX website and click the profile icon at the top right.
2. Go to Security, click Backup Codes, then Manage.
3. Click Get Backup Codes, enter your password, and enter the 6-digit OTP sent to your registered mobile number.
4. Download the codes right away. CoinDCX shows them only once.

If you use some or think they've leaked, choose Reset in the same place for a fresh set of 10 (CoinDCX). See 2FA backup codes.

When CoinDCX asks for a code

Once 2FA is on, CoinDCX asks for an authenticator code when you sign in and for certain sensitive actions (CoinDCX). Its help doesn't list which actions.

If CoinDCX rejects your code

CoinDCX's help puts it down to an expired or older code, or a clock that isn't set automatically (CoinDCX). Use the newest code in Novaz, then check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off.

CoinDCX also mentions setting the time zone to IST. Authenticator codes are based on the actual time, not the time zone, so an accurate, automatic clock is what counts. If nothing helps, tap Chat Now on CoinDCX's help center (CoinDCX). More in Authenticator code not working?

Changing phones or losing your phone

CoinDCX gives three routes, in this order (CoinDCX, CoinDCX):

1. Your saved Secret Key. Add it to Novaz on the new iPhone with Enter key manually, and the same codes come back. If you use Novaz's iCloud backup or a backup file, restoring it on the new iPhone also brings CoinDCX back. See How to transfer your authenticator app to a new iPhone.
2. A backup code, to sign in when you can't make a code.
3. CoinDCX Support. Without the key or a code, tap Chat Now at the top right of the help center to ask for a 2FA reset. CoinDCX says you'll have to complete its required verification first, but doesn't say what it asks for or how long it takes.

See also Lost the phone with your authenticator app?

Turning 2FA off

In the CoinDCX app, go to Security and tap Disable Google Auth, then Continue. Enter your Security PIN and tap Send OTP, then enter the email OTP and a code from Novaz, and tap Disable Google Auth again (CoinDCX). INR withdrawals pause for 24 hours afterwards. Then open CoinDCX in Novaz and tap Remove account.

Official CoinDCX help

• How do I enable Two-Factor Authentication (2FA)?
• What is the Secret Key, and why should I save it?
• I changed or lost my phone. How can I access my account?
• Why isn't my Google Authenticator code working?
• Why are INR withdrawals temporarily unavailable after enabling or disabling 2FA?
• How do I disable Two-Factor Authentication (2FA)?
• How do I generate Backup Codes?
• Can I generate Backup Codes using the CoinDCX app?