How to log in to Crypto.com (step-by-step)
Follow these steps for a successful crypto.com login. If you use the mobile app, the screens may differ slightly but the flow is the same.
1. Open official app or website
Only use the official Crypto.com app from your platform's store or type https://crypto.com in your browser. Avoid clicking links inside unsolicited emails or messages.
2. Enter email/phone & password
Use your registered email or phone number, then type your password. If you rely on a password manager, use it to paste credentials to avoid typos.
3. Complete Two-Factor Authentication (2FA)
If 2FA is enabled you will be prompted for a code. Use an authenticator app (recommended) or SMS if that's what you configured. Authenticator apps are more secure than SMS.
4. Device verification & account checks
New devices may require additional verification via email or phone. Review any alerts carefully before granting access.
Password reset & account recovery
If you forget your password, use the 'Forgot password' link on the login screen. Follow the email instructions and confirm the reset link is from the official domain. If you can't access the registered email, contact support and be prepared to verify identity.
Lost 2FA or device?
If you lose access to your authenticator, use your saved recovery codes. If recovery codes are unavailable, open a support ticket and follow Crypto.com's recovery process which may require ID verification.
Security best practices for login
- Use a unique, strong password (password manager recommended).
- Prefer authenticator apps (Authy / Google Authenticator) over SMS.
- Enable biometric login on mobile for convenience & security.
- Keep recovery codes in a secure offline location (not cloud notes).
- Regularly review active sessions and revoke unknown devices.
Common login errors & fixes
Incorrect password
Use 'Forgot password' to reset. If reset emails don't arrive, check spam, ensure the correct email, or contact support.
2FA codes not working
Sync your device time (auth apps rely on accurate device time). Reinstalling the authenticator without backup codes will invalidate access — avoid this unless you have recovery codes.
Account temporarily locked
Multiple failed attempts or suspicious activity can trigger a temporary lock. Wait the cooldown period or follow on-screen steps to verify your identity.
Frequently asked questions
Reset emails typically arrive within a few minutes. If not received within 30 minutes, check spam and then contact support.
Yes. New devices may trigger extra verification. Monitor active sessions and revoke any you don't recognize.
SMS is better than nothing but less secure than authenticator apps because SIM-swap attacks exist. Prefer app-based 2FA.
Immediately change your password, revoke session tokens, remove linked devices, and contact official support. If funds are at risk, notify support and follow their incident response process.