When accessing the internet, your IP address communicates your location to the rest of the web. This is what allows your search results to be relevant to your locale. We used this data to implement an advanced security feature known as IP Validation, which ensures that only authorized users can access their cryptocurrency. An attempt to sign into your Edge account from an unrecognized device and location - will trigger an IP Validation lockout.
If your username and password were to ever be compromised or become known by an attacker, they would NOT be granted immediate permission into your account. Any device that's currently logged in will receive a notification about this attempt. If it was you, you can simply approve the request to clear the IP Validation lock on the new device. If you do not recognize the attempt, deny permission and change your password immediately to prevent unauthorized access to your account.
Important!
When reinstalling the app, or clearing app data, the app will no longer remember you and be treated as an unrecognized device. If you are using a single device and accidentally delete the app, you may need to await the lock-out period to regain access to your account. This is avoidable if you have enabled the Two-Factor Authentication (2FA) code in your Account Settings, and saved it in a secure location.
How does Edge implement 2FA?
Two-factor authentication (2FA), also known as two-step verification, is a security protocol by which two separate checkpoints are required to verify or authenticate oneself. Many users may be familiar with using an authenticator app, such as Authy or Google Authenticator, that has a rotating 6-digit code. Edge’s implementation of 2FA is unique and and independent of requiring a secondary authenticator app.
You have 2-3 ways to bypass the Authorize Device screen:
Wait a minimum of 7-days (longer for dormant accounts)
Approve login from another device that you are currently logged into (no waiting)
Authenticate using the 2FA code for your account (no waiting)
And when you generate a 2FA code (found in your Edge account settings), this enables the third option for accessing your account immediately on a new device.
How to get the 2FA code:
IP Validation is enabled by default, but the 2FA code for your account does not exist until generated from within your account settings. To do this:
Log into Edge, open the Menu (≡) in the top right, and click on Settings.
Click “Tap to Unlock Account Settings” near the top and enter your password.
Select "Set Up 2-Factor Security” and then “Enable 2FA.”
Tap on “Show backup code” and store this data securely.
We recommend not to store this info right next to your username & password, otherwise it doesn't really function as a 2nd factor for self authentication. If your 2FA code and login credentials were to become compromised, together, at the same time -- that would allow immediate, unauthorized access to your account! Safely stored in your deep crypto notes would be fine, since it is only used when you lose your device and need to restore your account onto a new device, or after reinstalling.
Q&A:
"What if I have an extended lock timer and no 2FA code, do I really have to wait as long as it says?"
If your lock timer is over 30 days, and you cannot bypass it via self-authentication, we can try to manually authenticate your account ownership using a few basic data points about your account history. Please reach out to us using the chat bubble from our support center, or by emailing [email protected] to get started with the process.
"Can Edge just email me the 2FA code?"
Your Edge account doesn't contain any personal information. A username and password is all that's required for a full Edge account. The app is very private and we do not know who our users are, or what they might be holding in their accounts.
"I have another question about 2FA. Can I add mine question here?"
Yes. Please reach out to our support team to let us know any questions you have about the IP Validation and 2FA security system protecting all Edge accounts.