Skip to main content
Open /settings → Security → Open Security in the primary Cove bot. This opens Cove Wallets → Security. The Security panel shows whether 2FA is on and whether trading is locked. These controls cover every wallet and profile in your Cove account.

​
Set up 2FA

  1. Tap Set up 2FA and scan the QR code with an authenticator app. If scanning is unavailable, use Can’t scan? to copy the setup key.
  2. Enter the 6-digit code from that app and tap Turn on 2FA.
  3. Check that the Security page says On. Keep access to your authenticator; losing it can prevent key export, sends, wallet imports, and turning 2FA off.
If the page says setup is temporarily unavailable, wait until Set up 2FA becomes available; the status shown in Security is the one to trust for your account. Once enrolled, Cove asks for a fresh code to export keys, send funds externally or to another user, import wallets, and approve wallet marketplace purchases or private payments. The approval for a send is tied to the amount and destination shown in its confirmation. Moving funds between your own Cove wallets also checks that the receiving wallet is trusted under the current enrollment.
Never send your setup key, authenticator code, private key, or a screenshot showing them to support or anyone else.
Telegram Settings → Security showing 2FA and trading status, without codes.

Telegram Settings → Security showing 2FA and trading status, without codes.

Example 2FA setup screen; the QR, setup key, and code shown are no longer valid.

Example 2FA setup screen; the QR, setup key, and code shown are no longer valid.

Cove Wallets Security overview after setup, with no code visible.

Cove Wallets Security overview after setup, with no code visible.

​
Optional trading lock

Trading lock is a separate option and starts off. Turn it on in Cove Wallets → Security → Trading lock and choose how long Cove may stay inactive before locking. The available presets are 1, 4, 8, 12, or 24 hours, 3 days, or 7 days. The starting selection is 4 hours. Using the bot or trading in the app or extension restarts an active timer. Automated orders and agent requests do not keep it unlocked. When locked, Cove blocks new trades and changes to limit or DCA orders; already placed orders continue running. Viewing balances and navigating still work. A code used for a send does not unlock trading. To unlock, tap Unlock trading in /settings → Security or on a blocked-trade message, then enter a fresh 6-digit authenticator code in the chat. You can also unlock in Cove Wallets → Security. A blocked trade is not retried for you: review it and submit it again. /lock locks trading immediately when the option is enabled.
Trading lock controls and duration choices.

Trading lock controls and duration choices.

Telegram locked status and Unlock trading button, without a code.

Telegram locked status and Unlock trading button, without a code.

​
Add a recovery email before you lose Telegram access

Once 2FA shows On, open Cove Wallets → Security → Recovery email and tap Add recovery email. Complete the email-linking flow, then check that Security shows Added and the correct address. You can use Copy recovery link there, or open the same public link below later. The link contains no account-specific code; access depends on signing in with the email already linked to your Cove wallet account. A recovery email gives you another way to reach wallet key export if you lose Telegram access. It does not replace your authenticator, restore your Telegram account, or turn off 2FA. Add it while you can still open Cove Wallets from Telegram.

​
Export keys after losing Telegram access

Open wallet key recovery ↗
  1. Open the link in a regular browser and choose Sign in with recovery email. Use the address you previously added in Cove Wallets → Security.
  2. Find the wallet under Active. If you previously deleted it from Cove, check Deleted. The recovery page can show wallets across your profiles, including deleted wallets that still belong to your account.
  3. Check the wallet address and chain, then choose Export Private Key for its EVM or Solana wallet. Complete the authenticator check and Privy’s secure export flow when prompted. Keep the key somewhere only you can access.
  4. Choose Sign out when finished. Leaving or reloading the page also signs you out; sign in again to reopen it.
This page exports keys; it does not restore Telegram access or re-add a deleted wallet to Cove. To re-add a deleted wallet inside Cove, use Recover in the Telegram wallet app when you have access again. See Wallet security and recovery for normal wallet export and deleted-wallet recovery.
Recovery requires an email linked before you lose Telegram access. Email alone does not replace the authenticator needed for protected key export. Never share or screenshot a private key.

​
Turn off 2FA or get help

To turn 2FA off, remove a linked recovery email in Cove Wallets → Security first, then use Turn off 2FA and complete the code confirmation. Turning off 2FA also turns off the trading lock. If your authenticator is lost, contact Support from an account you can access. Avoid repeated guesses: verification can be temporarily rate limited.