ByteExchange has two extra passwords. The fund password is your withdrawal key: once set, it is asked at every crypto withdrawal. The Master Key (master password) guards your most sensitive account changes — changing your e-mail, changing your login password and turning off 2FA — and lets you recover your account if you lose access.
Fund password vs Master Key at a glance
| Fund password | Master Key | |
|---|---|---|
| Asked when | Every crypto withdrawal | Changing your e-mail, changing your login password, turning off 2FA |
| Length | 8–20 characters | 12–64 characters, with an uppercase letter, a lowercase letter, a digit and a special character |
| Must differ from | Your login password | Your login password and your fund password |
| Can be removed | Changed or reset any time | Permanent once set — it can be changed or reset |
| Wrong attempts | 5 wrong tries lock it for 2 hours | 5 wrong tries lock it for 30 minutes |
Withdrawals use the fund password; the Master Key stays out of the withdrawal flow.
Set up a fund password
- Go to Settings → Security.
- Find Fund Password and tap Set Up.
- Enter the new fund password twice (8–20 characters, different from your login password).
- Enter the verification code: the code from your authenticator app if you use one, otherwise the code we e-mail you.
- Confirm. From now on every crypto withdrawal asks for it.
The fund password counts as one of your withdrawal keys, together with the authenticator app and a passkey. If you add it while no authenticator app is on, withdrawals pause for 24 hours first (see Why withdrawals are paused).
Change or reset your fund password
- In Settings → Security, open Fund Password and tap Manage.
- To change it, use the Change tab: enter the current fund password, the new one and your verification code.
- Forgot it? Use the Forgot / Reset tab: enter a new fund password, your verification code and your login password.
Changing or resetting the fund password pauses withdrawals for 24 hours.
Set up a Master Key
- In Settings → Security, find Master Key and tap Set Up.
- Choose a Master Key of 12–64 characters with uppercase, lowercase, a digit and a special character.
- Tick the box confirming you understand the Master Key is permanent once set.
- Enter your verification code and confirm.
Keep it somewhere offline, such as a password manager or a written note in a secure place. It is your way back into the account if you ever lose access to your e-mail, password or authenticator.
Change or reset your Master Key
- Change: open Master Key in Settings → Security, enter the current Master Key, the new one and your code. Withdrawals pause for 48 hours.
- Forgot it: tap Request Reset. A 72-hour waiting period starts and the status shows Reset Pending. After the wait, return to the same card, enter your login password and set a new Master Key. You can cancel a pending reset during the wait. Withdrawals stay paused for the waiting period plus 48 hours.
Recover your account with the Master Key
If you lost access to your e-mail, password or authenticator app and you set a Master Key earlier, go to bexc.io/recover:
- Enter your first and last name and confirm you have a BEXC account.
- Enter your account e-mail and your Master Key.
- Choose the change to make: Change email, Reset login password or Disable 2FA, and enter the new value if asked.
- Complete the human verification and tap Request recovery.
A confirmation e-mail with a cancel link goes to the address currently on the account. The change applies after 72 hours unless it is cancelled from that e-mail. When it completes, every session is signed out and your identity verification (KYC) is reset, so you verify again before higher limits return. If a recovery is cancelled, the Master Key used for it is removed for your safety; sign in and set a new one in Settings → Security.
FAQ
Is the fund password the same as my login password?
No. It is a separate password of 8–20 characters and must be different from your login password. It is asked only when you withdraw.
Does the Master Key ever get asked at withdrawal?
Withdrawals use your e-mail code plus your fund password, authenticator app or passkey. The Master Key is asked only when you change your e-mail, change your login password or turn off 2FA.
I forgot my fund password. What do I do?
In Settings → Security, open Fund Password, choose Forgot / Reset, and enter a new fund password, your verification code and your login password. Withdrawals pause for 24 hours afterwards.
How long does a Master Key reset take?
There is a 72-hour waiting period after you request it. After that you set the new Master Key, and withdrawals stay paused for 48 more hours.
Can I remove the Master Key?
The Master Key is a permanent layer: once set, you can change it or reset it, and it stays on the account. That is what makes it a reliable recovery key.