Secure your account before your first deposit
Account security is not a single switch. Your password protects sign-in, while withdrawals have separate confirmations. Before depositing, open Security in your dashboard and set up a PIN, a destination address and an authenticator.
Do this early: a newly confirmed address cannot be used for withdrawal immediately. Leaving the setup until a contract matures turns a security hold into an unwelcome surprise.
Set a withdrawal PIN
In Security, set a separate six-digit PIN. It is required for every withdrawal request and does not replace your sign-in password. Avoid sequences, repeated digits, birthdays and the code that unlocks your phone.
Keep the PIN out of messages and away from the password. Changing sensitive security settings can trigger a temporary withdrawal hold, giving you time to catch an unauthorized change.
Whitelist your own address
Choose the asset and network, then add a wallet address you control. Check the network and the first and last characters before confirming: USDT on BEP-20, BTC on Bitcoin and ETH on Ethereum use different routes and are not interchangeable.
Adding an address requires an emailed code. Once confirmed, the new address waits 24 hours before withdrawals to it are enabled. If you see an address you did not add, revoke it and check your sessions and password at once.
Turn on 2FA
Connect an authenticator app in Security. Sensitive actions will then require a one-time code from your device as an additional factor. Access to your inbox alone will not complete those actions.
Save the ten one-use recovery codes away from your phone. Each works once, and the issued set cannot be displayed again. Never send these codes or your current authenticator code to anyone, even someone claiming to be support.
Know when an emailed code expires
The email contains a six-digit code for a specific action. It lasts 10 minutes and can be used once. After five incorrect attempts, request a new one. Resending is available after a 30-second pause, and a new code replaces the previous one.
For a withdrawal, the code is tied to the chosen address and amount. If either changes, request a fresh code. CarryLane does not ask you to read an emailed code over the phone, in chat or by direct message.
