An unrecognized device login notification is the cheapest and most effective early warning against account theft. The majority of users whose accounts were compromised reflect, "If I had seen the email at that moment, I could have saved it." This article teaches you how to turn on login notifications, adjust push methods, and the correct actions to take after receiving an abnormal notification. The setup entrance is on the account security page. Please log in to the Binance Official Website to configure it once and for all. You can also modify these settings later in the Binance Official App. Apple users can refer to the iOS Installation Guide.
What Events Do Login Notifications Cover?
Binance's login notifications are not just triggered during logins; they cover all sensitive operations:
- New device login (including first-time logins and unrecognized device logins)
- New IP login (changing countries, regions, or networks)
- Withdrawal requests
- Password modifications
- Enabling or disabling 2FA
- API Key creation or deletion
- KYC information modifications
- Binding or modifying an email or phone number
- Anti-phishing code modifications
- Whitelist address additions
Every single one of these will trigger a push notification within seconds, and across multiple channels simultaneously.
The Four Notification Channels
Binance supports four notification methods, which are all enabled by default. It is recommended to keep the defaults.
1. Email Notification
- Most comprehensive, with the most detailed content.
- Includes IP address, device model, browser, and login time.
- Permanently saved in your inbox, easily traceable.
2. App Push Notification
- Fastest, almost real-time.
- Requires installing the Binance App and being logged in.
- Can be received even on a locked screen.
3. SMS Notification
- Requires binding a phone number.
- Limited to critical operations (withdrawals, password changes, etc.), does not include standard logins.
- International SMS might experience delays.
4. Telegram Notification (Optional)
- Requires binding a Telegram account first.
- Pushes in real-time to a Telegram bot.
- Suitable for users who travel frequently or whose IPs change often.
How to Enable Login Notifications
Login notifications are enabled by default, but many people might have manually turned them off in the past. Here are the steps to re-enable them:
On the Website
- Log in to binance.com.
- Click your profile icon in the top right corner → "Security".
- Find "Device Management" and "Account Activity".
- Enter "Notification Settings".
- Check "New Device Login Notification".
- Check "New IP Address Notification".
- Check "Sensitive Operation Notification".
- Save.
On the App
- Open the Binance App.
- Go to "Account" at the bottom → Profile Icon → "Security".
- Tap "Notification Management".
- Turn on all the switches.
What Does a Login Notification Email Look Like?
A typical format of a genuine email:
Subject: [Binance][Your Anti-Phishing Code] New Device Login Alert
Hello,
We have detected a new device login to your Binance account:
Time: 2026-04-08 15:42:17 (UTC+0)
Device: Chrome 124.0 / Windows 11
IP Address: 203.xxx.xxx.xx
IP Location: Singapore
If this was you, please ignore this email.
If this was NOT you, please immediately:
1. Freeze your account: [Click to Freeze]
2. Change your password
3. Check recent transaction history
— Binance Security Team
Pay attention to a few key elements:
- The subject contains your Anti-Phishing Code (if you have set one).
- It has specific time, device, and IP details.
- It provides an official one-click account freezing link.
- The sender address is an official domain (e.g.,
[email protected]).
The Correct Response When Receiving an Unrecognized Login Notification
Step 1: Determine If It Was You
- Is the time correct? (Does it match exactly when you were using it?)
- Is the location correct? (Does it match your current IP location?)
- Is the device correct? (Is it the browser and OS you are using?)
If even one detail doesn't match, immediately proceed to Step 2.
Step 2: Freeze Immediately
Regardless of whether you are actually hacked or not, freeze it first.
How to freeze:
- Click the "One-Click Freeze" link in the email (only works in genuine emails).
- Or log in to Binance → Security Center → Freeze Account.
- Or click "Forgot Password" on the login page → select the Freeze option.
Freezing is reversible. If it's a misunderstanding, you can unfreeze it within minutes; if you are actually being hacked, freezing will save your assets.
Step 3: Change Your Password
After freezing, set a completely new, strong password. Do not use the same password across other websites.
Step 4: Check Transaction History
- Assets - Transaction History
- Assets - Withdrawal History
- Futures - Order History
- API Management - API Key List
If you find any anomalies, take screenshots immediately; you will need them for subsequent appeals.
Step 5: Enable All Security Features
- Google Authenticator 2FA
- Anti-Phishing Code
- Withdrawal Whitelist
- Delete all existing API Keys
Common False Alarms in Login Notifications
The following situations might trigger a notification when it's actually just you:
False Alarm 1: Changing WiFi
Your IP address changes → triggers a notification. Just ignore it after confirming it's you.
False Alarm 2: Using a VPN
A VPN changes your exit IP, which the system recognizes as a new IP. Also ignore it.
False Alarm 3: Traveling
Flying from Beijing to Hong Kong → IP region changes → triggers a notification.
False Alarm 4: Browser Update
Chrome updates from 123 to 124 → The system might interpret it as a "new device." Common, but not serious.
How to distinguish a false alarm from a real threat: Look at the device model. If it's a computer/phone model you are familiar with, it's highly likely a false alarm. If it's a completely unfamiliar model (e.g., it says "iPhone 13 / iOS 17" but you only use Android), it's a 100% real alert.
How to Avoid Excessive Notification Spam
Some users complain about too many notifications, but never turn off login notifications directly. Instead, you can:
Solution 1: Use a Fixed IP
- Try to log in using fixed IP environments like your home or office.
- Avoid constantly switching VPNs.
- Once your network is stable, the notifications will decrease.
Solution 2: Add Trusted Devices
Binance allows you to mark your frequently used devices as "Trusted Devices":
- "Security Center" → "Device Management"
- Find the frequently used device.
- Click "Mark as Trusted".
- Future logins from this device will no longer trigger notifications.
Solution 3: Filter Emails
Create a rule in your email client for Binance emails, automatically categorizing them into a "Security Notifications" folder. This won't stop the notifications from arriving, but it will keep your inbox uncluttered.
Things you absolutely MUST NOT do:
- ❌ Turn off login notifications directly.
- ❌ Block Binance emails.
- ❌ Unsubscribe.
Device Management: How to Force Unrecognized Devices Offline
After receiving an unrecognized login notification, in addition to freezing your account, you should also kick the unrecognized device offline:
- "Security Center" → "Device Management"
- Look at the "Currently Active Devices" list.
- Find the unrecognized device.
- Click "Remove" or "Force Offline".
- That device's session will immediately become invalid.
A good habit: Check your device list once a week and remove devices you no longer use.
Frequently Asked Questions
Q: I've never received a login notification. Is it turned off?
A: It's possible the emails are going to your spam folder. Check your spam box and add Binance's sender address to your whitelist. You can also go to the "Security Center" and send a test notification to confirm if the notification system is working correctly.
Q: Is there a delay with login notification emails?
A: They usually arrive within 30 seconds. In very rare cases (email server congestion), there might be a delay of a few minutes. App push notifications are almost instantaneous.
Q: Multiple people in my household share one Binance account. Will there be a lot of notifications?
A: Binance officially prohibits account sharing. Multiple people logging in will trigger frequent notifications, and it violates the user agreement, which could lead to your account being restricted for risk control. Everyone should register their own account.
Q: Can I track the location of the IP shown in the login notification email?
A: The email already automatically displays the general location. If you need more precision, you can use free IP lookup tools like ipinfo.io or ip-api.com and enter the IP to find the city, ISP, and whether it's flagged as a VPN.