Securing your digital assets is a top priority when managing cryptocurrency, and one of the most effective tools at your disposal is the allowlist feature in the OKX app. By enabling this security layer, you ensure that funds can only be withdrawn to pre-approved wallet addresses—drastically reducing the risk of unauthorized transactions, even if your account is compromised.
This guide walks you through how to set up and manage the allowlist, understand its advanced settings, and maintain verified addresses for seamless, secure withdrawals.
What Is an Allowlist and Why Use It?
An allowlist (also known as a whitelist) is a security mechanism that restricts crypto withdrawals to only those wallet addresses you’ve previously saved in your address book. This means even if someone gains access to your account, they won’t be able to send funds to unfamiliar or malicious wallets unless those addresses are already approved.
👉 Secure your crypto withdrawals with powerful address protection tools.
This feature adds a critical layer of defense, especially for users holding significant balances or frequently transacting across multiple wallets.
Step-by-Step: How to Enable Allowlist in the OKX App
Follow these clear steps to activate the allowlist and begin protecting your assets:
1. Open the OKX App and Navigate to Withdraw
Launch the OKX app, tap on Assets, then select Withdraw from the menu.
Tip: Always double-check that you're using the official OKX application from a trusted source.
2. Choose Your Withdrawal Method
Select your preferred withdrawal method—this could be on-chain transfer, internal transfer, or another supported option.
3. Pick the Cryptocurrency to Withdraw
Choose the specific cryptocurrency you'd like to send (e.g., BTC, ETH, USDT), then tap On-chain to proceed.
4. Enter or Select a Saved Address
You can either:
- Manually enter a recipient address, or
- Choose an existing address from your address book
If no addresses are listed, tap Add address to create a new entry.
Pro Tip: When adding an address, you can save it as a universal address for a specific network (like Ethereum or Tron), allowing you to reuse it for other tokens on the same chain.
5. Select the Correct Address Type
Under Select address type, choose the appropriate format (e.g., legacy, segwit, bech32 for Bitcoin). Ensuring compatibility prevents failed transactions.
6. Save as Verified Address (Optional but Recommended)
During setup, you’ll have the option to save the address as verified. Doing so skips future verification steps when withdrawing to this address—saving time without sacrificing security.
Tap Save to confirm.
7. Enable Allowlist in Address Settings
Go to Address settings and toggle on:
- Allowlist: Restricts withdrawals exclusively to saved addresses.
- New address withdrawal lock: Adds a 24-hour waiting period before funds can be sent to any newly added allowlist address.
The second option provides an extra buffer against instant attacks—even if a hacker adds an address, they must wait a full day before accessing funds.
To disable the allowlist later, simply switch it off and confirm with your Two-Factor Authentication (2FA) code.
Understanding the 30-Day Verification Rule
Starting recently, OKX has implemented a 30-day verification window for all addresses in the withdrawal address book. This change enhances long-term account safety by ensuring verified status isn’t permanent unless actively maintained.
How Does 30-Day Verification Work?
- Once an address is verified, it remains active for 30 days.
- To keep it verified, you must make at least one withdrawal within that period.
- If no transaction occurs within 30 days, the verification expires, and future withdrawals will require re-verification.
- Each successful withdrawal resets the clock—extending verification by another 30 days from the latest transaction date.
Example:
If you withdraw to an address at 7:00 AM UTC on July 4, 2024, its verification remains valid until August 3, 2024. Make another withdrawal before then, and it extends again.
Impact on Existing Verified Addresses
All previously verified addresses are now subject to this 30-day rule. To preserve uninterrupted access:
✅ Option 1: Wait for the 30-day period to expire, then re-verify permanently.
✅ Option 2: Delete the current entry and re-add it with permanent verification selected during setup.
👉 Learn how to manage verified crypto addresses with confidence.
This update encourages proactive security hygiene and reduces risks associated with outdated or forgotten addresses.
How to Set Permanent Verification
By default, new verifications last 30 days. To make them permanent:
- While adding or editing an address, look for Change verification period
- Toggle from “30 days” to Permanently verified
- Confirm your choice before saving
Note: Even permanently verified addresses are still subject to allowlist restrictions—they just skip recurring security checks.
Frequently Asked Questions (FAQ)
Q: Can I withdraw to a new address if allowlist is enabled?
A: Only if the address is already saved in your address book. New addresses must be added first and may be subject to a 24-hour lock if "New address withdrawal lock" is enabled.
Q: What happens if I disable the allowlist?
A: You’ll regain the ability to withdraw to any address without prior approval. However, this increases your exposure to potential fraud—only disable it if absolutely necessary and always re-enable it afterward.
Q: Is there a limit to how many addresses I can save?
A: While there’s no public hard cap, it's best practice to maintain only essential addresses to reduce confusion and potential targeting.
Q: Do I need 2FA to enable or disable the allowlist?
A: Yes. Any changes to allowlist settings require Two-Factor Authentication for confirmation—ensuring only authorized users can modify these critical protections.
Q: Can I use the allowlist for all cryptocurrencies on OKX?
A: Yes. The allowlist applies across all supported coins and tokens when withdrawing via on-chain methods.
Q: What should I do if I lose access to a verified address?
A: Simply remove it from your address book and add a new one. Remember to enable verification or set it as permanent based on your usage frequency.
Final Tips for Maximum Security
- Always verify network compatibility before saving an address.
- Regularly audit your address book—remove unused or outdated entries.
- Combine allowlist protection with strong 2FA (preferably using an authenticator app).
- Avoid public Wi-Fi when managing withdrawals or security settings.
👉 Take full control of your crypto security with advanced withdrawal safeguards.
By enabling the allowlist and understanding how verification periods work, you’re not just protecting your assets—you’re future-proofing your entire digital financial life.
Whether you're a casual trader or a long-term holder, these simple steps dramatically reduce risk and give you peace of mind every time you transact.