A mining pool account controls more than a hashrate dashboard. It holds payout settings, withdrawal addresses, and API credentials. Protecting your ViaBTC account means securing both your account access and the miners connected to it. This guide covers the main checks and what to do if you suspect unauthorized activity.
1. Secure Your Sign-In and Registered Email
Your registered email is an important part of account verification and recovery. Protect it with a strong, unique password and its own multi-factor authentication. Use a different password for your ViaBTC account, ideally generated and stored by a reputable password manager.
Use a trusted device to access your account. If you must use a shared device, avoid saving your credentials and sign out afterward. If a device is lost or you suspect your credentials have been exposed, change the affected passwords promptly from a trusted device. If you notice unauthorized account activity, follow the response steps below.
2. Bind Google Authenticator and Enable Sign-In 2FA
ViaBTC supports Google Authenticator for two-factor authentication. After binding it, turn on “2FA while signing in” so that signing in requires both your password and a verification code. Binding the authenticator and enabling sign-in authentication are separate steps.
During setup, back up the authenticator setup secret securely. For example, write it down and store it in a safe offline location rather than keeping the only copy as a screenshot on your phone. Treat this secret as a credential: someone who obtains it may be able to generate your authentication codes.
Follow ViaBTC’s 2FA setup instructions. If a security tool becomes unavailable, recovery may require supporting documents and processing time. ViaBTC’s security-tool FAQ describes a reset process that can take up to seven business days; this is not a general deadline for reactivating a frozen account.
3. Protect Payment Settings and Review Auto-Withdrawal
ViaBTC provides a payment password separate from the sign-in password. Setting it up or changing a known payment password involves Google Authenticator or SMS verification. If you forget the payment password, the documented recovery process uses your sign-in password, email verification, and supporting account information.
ViaBTC states that withdrawal service is suspended for 48 hours after a successful payment password reset. Factor this restriction into any planned recovery or payout timing. See the official payment-password instructions for the route that applies to your situation.
Auto-withdrawal settings deserve careful review because an unauthorized destination change can redirect subsequent payouts. Before enabling or editing auto-withdrawal, check:
- The selected coin and withdrawal destination.
- The full destination address when withdrawing on-chain.
- The payout mode: by account balance or by daily earnings.
- The minimum payout amount, where applicable.
- Whether auto-withdrawal is enabled for the intended account.
Review the change records for unexpected edits, especially after account recovery. If you manage several accounts, check each account’s settings before syncing them across accounts.
ViaBTC also states that a configured on-chain payout address becomes invalid after 90 consecutive days without a payment. This concerns the saved auto-withdrawal configuration; it does not mean the blockchain address itself expires. See the auto-withdrawal guide for current settings and rules.
4. Recognize Phishing and Verify Official Channels
Impersonators may use fake websites, emails, or social-media accounts to obtain credentials or request transfers. ViaBTC states that its staff will not initiate private chats or ask for account passwords, verification codes, or payments to resolve problems. Its Help Center also states that it has no official telephone or live-chat support channel.
Open ViaBTC from a verified bookmark instead of signing in through unsolicited messages or search advertisements. If a website, email address, or social-media account looks unfamiliar, check it through the ViaBTC Official Verification Channel. Enter the full website URL, email address, or social-account link.
Follow the official verification guidance, and never disclose your password or authentication codes to someone claiming to provide support.
5. Secure API Keys and Restrict API Access
ViaBTC’s documented pool API provides access to account information, hashrate data, earnings, and payment history. These records can contain sensitive operational information, so keep both the API key and secret key confidential. Do not share screenshots of the page displaying them.
Create API credentials only when a monitoring tool or application needs them, and delete credentials that are no longer used. If your integration connects from fixed IP addresses, configure the IP whitelist to restrict access to those addresses. ViaBTC allows up to 20 IP addresses, entered one per line.
An IP whitelist adds a restriction on where API requests can originate, but it does not replace keeping credentials secure. Follow the API management instructions and consult the official pool API documentation when connecting an application.
6. Check ASIC Firmware, Pool URLs, and Worker Configuration
Account security does not prevent someone from altering a miner’s local settings. Unexpected changes to a pool URL or worker name can indicate a device-level compromise, even when the ViaBTC account remains secure.
Use firmware obtained from the miner manufacturer’s official channels. ViaBTC’s miner-security guidance recommends official firmware, avoiding unofficial overclocking firmware, and updating firmware and changing the miner’s login password after repairs at an unofficial service location.
Periodically check that each ASIC uses the intended official pool endpoint and the correct worker name. If you use ViaBTC Mineragent, obtain it through the official download links in ViaBTC’s pool URL and Mineragent notice.
Investigate unexpected configuration changes. If you suspect miner malware, isolate the affected device from the network and contact the manufacturer’s official support for recovery instructions, as ViaBTC’s guidance recommends.
7. Review Payout Settings Across Sub-Accounts
ViaBTC sub-accounts let you track hashrate and mining income separately and set different auto-withdrawal addresses. They can help organize different farms or groups of miners.
Creating sub-accounts alone does not protect against compromise of the primary login. Apply strong authentication to that login and review the payout destination for every sub-account you use. See ViaBTC’s sub-account guide for setup and management details.
8. What to Do If You Suspect Unauthorized Activity
If you find an unauthorized sign-in, payout-address change, or other account activity, take prompt action:
- Freeze the account if you can still sign in. Go to Account Management > Account Settings > Account Security > Freeze Account, and follow the confirmation steps.
- Secure your registered email from a trusted device. Change its password if exposure is suspected and review its authentication settings.
- Contact official ViaBTC support promptly. Submit a support ticket for recovery and reactivation instructions. If you cannot sign in to freeze the account, contact support immediately for assistance.
- Complete account checks as access permits or as support directs. Reset exposed credentials, restore or rebind two-factor authentication where necessary, and review payout settings and API access. Recreate only the API credentials you still need once secure access is restored.
According to ViaBTC’s freeze-account instructions, freezing disables sign-in for the main account and sub-accounts, terminates active login sessions, suspends revenue sharing and auto-payment, deletes all API keys, and cancels pending withdrawals. Reactivation requires contacting support.
Because a frozen account cannot be accessed normally, do not assume you can change its settings before reactivation. Follow support’s instructions on the sequence of recovery steps. Freezing limits account activity; recovery and subsequent checks help restore secure access.
Conclusion
Start with unique passwords, a secured email account, and Google Authenticator with sign-in 2FA enabled. Review payout destinations, protect API credentials, and verify official channels before entering sensitive information. Check miner firmware and pool configuration separately. If you detect unauthorized account activity, freeze the account when possible and contact official support promptly.
FAQ
Does binding Google Authenticator automatically enable sign-in 2FA?
Binding Google Authenticator and enabling sign-in authentication are separate steps. After binding it, turn on “2FA while signing in.” Continue protecting your email, passwords, and payout settings as well.
How long are withdrawals suspended after resetting the payment password?
ViaBTC’s Help Center states that withdrawal service is suspended for 48 hours after a successful payment password reset.
What should I do first if I suspect my ViaBTC account has been compromised?
Freeze the account if you can still sign in, secure your registered email, and contact official ViaBTC support for recovery instructions. If you cannot sign in, contact support immediately. Complete account-setting changes when access permits or as support directs.
Can a secure ViaBTC account prevent miner-level attacks?
Account protections do not secure the miner’s firmware or local administration interface. Check miner passwords, firmware sources, pool URLs, and worker names separately.
Do sub-accounts protect against compromise of the primary login?
Creating sub-accounts alone does not provide that protection. They help organize mining activity and payout destinations, so protect the primary login and review each sub-account’s payout settings.