> ## Documentation Index > Fetch the complete documentation index at: https://docs.cove.trade/llms.txt > Use this file to discover all available pages before exploring further. # Two-factor authentication and trading lock > Set up an authenticator code, control the optional trading lock, and use recovery email to export wallet keys. Open **/settings → Security → Open Security** in the primary Cove bot. This opens **Cove Wallets → Security**. The Security panel shows whether **2FA** is on and whether trading is locked. These controls cover **every wallet and profile** in your Cove account. ## Set up 2FA 1. Tap **Set up 2FA** and scan the QR code with an authenticator app. If scanning is unavailable, use **Can't scan?** to copy the setup key. 2. Enter the **6-digit code** from that app and tap **Turn on 2FA**. 3. Check that the Security page says **On**. Keep access to your authenticator; losing it can prevent key export, sends, wallet imports, and turning 2FA off. If the page says setup is temporarily unavailable, wait until **Set up 2FA** becomes available; the status shown in Security is the one to trust for your account. Once enrolled, Cove asks for a fresh code to export keys, send funds externally or to another user, import wallets, and approve wallet marketplace purchases or private payments. The approval for a send is tied to the amount and destination shown in its confirmation. Moving funds between your own Cove wallets also checks that the receiving wallet is trusted under the current enrollment. > [!WARNING] > > Never send your setup key, authenticator code, private key, or a screenshot showing them to support or anyone else. ![Telegram Settings → Security showing 2FA and trading status, without codes.](https://mintcdn.com/cove-8695a88b/HTYDoaf_2BNbF78Y/assets/guide-screenshots/security_settings_panel.png?fit=max\&auto=format\&n=HTYDoaf_2BNbF78Y\&q=85\&s=ce0ac567bc0e6f5d534e7de548107c94) Telegram Settings → Security showing 2FA and trading status, without codes. ![Example 2FA setup screen; the QR, setup key, and code shown are no longer valid.](https://mintcdn.com/cove-8695a88b/HTYDoaf_2BNbF78Y/assets/guide-screenshots/security_2fa_setup.png?fit=max\&auto=format\&n=HTYDoaf_2BNbF78Y\&q=85\&s=9550cbbdcccae3429af7b38729af0c88) Example 2FA setup screen; the QR, setup key, and code shown are no longer valid. ![Cove Wallets Security overview after setup, with no code visible.](https://mintcdn.com/cove-8695a88b/HTYDoaf_2BNbF78Y/assets/guide-screenshots/security_2fa_on.png?fit=max\&auto=format\&n=HTYDoaf_2BNbF78Y\&q=85\&s=e5ea16074e300e6bf9c7d4d745afba95) Cove Wallets Security overview after setup, with no code visible. ## Optional trading lock **Trading lock** is a separate option and starts **off**. Turn it on in **Cove Wallets → Security → Trading lock** and choose how long Cove may stay inactive before locking. The available presets are **1, 4, 8, 12, or 24 hours, 3 days, or 7 days**. The starting selection is **4 hours**. Using the bot or trading in the app or extension restarts an active timer. Automated orders and agent requests do not keep it unlocked. When locked, Cove blocks new trades and changes to limit or DCA orders; **already placed orders continue running**. Viewing balances and navigating still work. A code used for a send does not unlock trading. To unlock, tap **Unlock trading** in **/settings → Security** or on a blocked-trade message, then enter a fresh 6-digit authenticator code in the chat. You can also unlock in Cove Wallets → Security. A blocked trade is not retried for you: review it and submit it again. **/lock** locks trading immediately when the option is enabled. ![Trading lock controls and duration choices.](https://mintcdn.com/cove-8695a88b/HTYDoaf_2BNbF78Y/assets/guide-screenshots/security_trading_lock.png?fit=max\&auto=format\&n=HTYDoaf_2BNbF78Y\&q=85\&s=822b5e1673900fa0bf7cde92b9a7fe01) Trading lock controls and duration choices. ![Telegram locked status and Unlock trading button, without a code.](https://mintcdn.com/cove-8695a88b/HTYDoaf_2BNbF78Y/assets/guide-screenshots/security_locked_bot.png?fit=max\&auto=format\&n=HTYDoaf_2BNbF78Y\&q=85\&s=2b445d17f3ccc4b2c6c12d6155d48ade) Telegram locked status and Unlock trading button, without a code. ## Add a recovery email before you lose Telegram access Once 2FA shows **On**, open **Cove Wallets → Security → Recovery email** and tap **Add recovery email**. Complete the email-linking flow, then check that Security shows **Added** and the correct address. You can use **Copy recovery link** there, or open the same public link below later. The link contains no account-specific code; access depends on signing in with the email already linked to your Cove wallet account. A recovery email gives you another way to reach **wallet key export** if you lose Telegram access. It does not replace your authenticator, restore your Telegram account, or turn off 2FA. Add it while you can still open Cove Wallets from Telegram. ## Export keys after losing Telegram access [Open wallet key recovery ↗](https://production.cove.trade/export-keys/) 1. Open the link in a regular browser and choose **Sign in with recovery email**. Use the address you previously added in Cove Wallets → Security. 2. Find the wallet under **Active**. If you previously deleted it from Cove, check **Deleted**. The recovery page can show wallets across your profiles, including deleted wallets that still belong to your account. 3. Check the wallet address and chain, then choose **Export Private Key** for its EVM or Solana wallet. Complete the authenticator check and Privy's secure export flow when prompted. Keep the key somewhere only you can access. 4. Choose **Sign out** when finished. Leaving or reloading the page also signs you out; sign in again to reopen it. This page exports keys; it does not restore Telegram access or re-add a deleted wallet to Cove. To re-add a deleted wallet inside Cove, use **Recover** in the Telegram wallet app when you have access again. See [Wallet security and recovery](/essentials/security.md) for normal wallet export and deleted-wallet recovery. > [!WARNING] > > Recovery requires an email linked before you lose Telegram access. Email alone does not replace the authenticator needed for protected key export. Never share or screenshot a private key. ## Turn off 2FA or get help To turn 2FA off, remove a linked recovery email in **Cove Wallets → Security** first, then use **Turn off 2FA** and complete the code confirmation. Turning off 2FA also turns off the trading lock. If your authenticator is lost, contact [Support](/features/support.md) from an account you can access. Avoid repeated guesses: verification can be temporarily rate limited. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.