How to Set Up a Binance Withdrawal Whitelist for Security
The withdrawal whitelist is one of the most powerful security features available on Binance. When enabled, your account can only send crypto to pre-approved addresses — even if an attacker gains access to your account, they cannot withdraw funds to an address that is not on your whitelist. This guide explains how the feature works and how to set it up properly.
What Is the Withdrawal Whitelist?
The withdrawal whitelist (also called Address Management or Withdrawal Address Whitelisting) is a security mechanism that restricts outgoing cryptocurrency transfers to a list of addresses you have explicitly approved in advance.
Without the whitelist enabled, anyone who gains access to your Binance account can withdraw funds to any address they choose. With the whitelist enabled:
- Only pre-approved addresses are available as withdrawal destinations
- Adding a new address to the whitelist requires email confirmation and is typically locked for 24 hours
- Even if a hacker bypasses your 2FA, they cannot immediately steal your funds — they would need access to your email to add a new address
This creates a critical time window during which you can detect unauthorized access and lock your account before any funds are moved.
Before You Begin
To use the withdrawal whitelist effectively, you should first:
- Enable email 2FA or Google Authenticator — Whitelist changes require 2FA verification, so you need at least one 2FA method active
- Secure your email account — Since email confirmation is part of the whitelist process, your email account is a critical security link. Enable 2FA on your email as well.
- Know your withdrawal addresses in advance — Have the wallet addresses you regularly use ready to add to the whitelist
How to Enable the Withdrawal Whitelist
On the Binance Website (Recommended for Initial Setup)
- Log in to your Binance account on the web
- Hover over your profile icon in the top right and click Security
- In the Security page, scroll to find Withdrawal Whitelist (sometimes listed under Account Activities or Fund Security)
- Click the toggle to enable it
- Binance will send a confirmation request to your registered email — open that email and click Confirm
- The whitelist is now enabled, but you have not added any addresses yet
Note: After enabling the whitelist, if your whitelist is empty, withdrawals will be temporarily blocked until you add at least one approved address.
On the Binance Mobile App
- Open the Binance app and go to Profile > Security
- Tap Withdrawal Whitelist (or Address Management)
- Toggle the feature on
- Confirm the change via the verification code sent to your email or 2FA
Adding Addresses to the Whitelist
Step 1: Navigate to Whitelist Address Management
- Go to Security > Withdrawal Whitelist (web) or Profile > Security > Address Management (app)
- Click or tap Add Address
Step 2: Fill in Address Details
You will be asked to provide:
- Coin/Token: Select the cryptocurrency (e.g., Bitcoin, Ethereum, USDT)
- Network: Choose the correct blockchain network (e.g., BEP20, ERC20, TRC20 for USDT)
- Wallet Address: Paste or scan the destination wallet address
- Address Label: A nickname to identify this address (e.g., "My Ledger Wallet," "Cold Storage," "Kraken Account")
Step 3: Verify the Address
- Triple-check the address — cryptocurrency transactions are irreversible
- Click Save or Add
- Binance will send a verification code to your registered email
- Enter the code and confirm
The 24-Hour Lock Period
Newly added addresses cannot be used for withdrawals for 24 hours after they are added. This is a deliberate security measure. If someone unauthorized gains access and tries to add a new withdrawal address, you have 24 hours to notice and take action.
During this 24-hour period, you will also receive email notifications confirming the new address was added — another early warning system.
Managing Your Whitelist
Viewing Your Whitelist
Go to Security > Withdrawal Whitelist to see all your approved addresses, their labels, the coin they are approved for, and the date they were added.
Deleting an Address
- Find the address in your whitelist
- Click Delete or the trash icon
- Confirm the deletion via email verification
Deleted addresses are removed immediately and can no longer be used as withdrawal destinations.
Editing an Address
Whitelist addresses generally cannot be edited in place for security reasons. If an address needs to be changed, delete the old one and add the new address through the standard flow (with the 24-hour lock applied to the new address).
What Happens When You Try to Withdraw to a Non-Whitelisted Address?
If you attempt to withdraw to an address not on your whitelist, Binance will block the transaction and display an error message: "Withdrawal address is not whitelisted."
To resolve this, either:
- Add the address to your whitelist (24-hour wait applies), or
- Temporarily disable the whitelist (which itself requires email confirmation and triggers a security delay)
This friction is intentional — it makes unauthorized withdrawals significantly harder.
Disabling the Whitelist
If you need to disable the feature:
- Go to Security > Withdrawal Whitelist
- Toggle it off
- Confirm via email and 2FA
After disabling, there is typically a security hold period (often 24 to 48 hours) before withdrawals to non-whitelisted addresses are permitted. This prevents an attacker from simply disabling the whitelist and immediately withdrawing funds.
Best Practices for Whitelist Management
- Add all your regular withdrawal destinations before enabling the whitelist — This avoids delays when you need to transact urgently
- Use descriptive labels — "Binance to Ledger BTC" is far more useful than "Address 1"
- Review your whitelist quarterly — Remove old addresses that you no longer use
- Never add addresses shared by others — Only add wallet addresses that you fully control and have independently verified
- Test with a small amount — After adding a new address, send a small test transaction to confirm it is correct before sending large amounts
Combining Whitelist with Other Security Features
The withdrawal whitelist is most effective as part of a layered security strategy:
- Enable the whitelist + Google Authenticator 2FA + Binance app biometric login
- Enable the anti-phishing code so you can identify genuine Binance emails when whitelist confirmation emails arrive
- Review login activity regularly to catch unauthorized access before it leads to a whitelist addition attempt
Get Started Today
Ready to begin? Sign up on Binance using our referral link and enjoy permanent trading fee discounts.
You can also download the Binance app to trade anytime, anywhere.