Introduction
Signing in to your Uphold account is the gateway to managing your digital assets, fiat balances and connected services. This guide explains the sign-in process, multi-factor authentication options, session and device management, troubleshooting steps if you can’t access your account, and practical advice to keep your account secure.
How to Sign In
- Open the Uphold website or mobile app. Verify you are on an authentic domain or official app. Bookmark the official login page to avoid phishing links.
- Click or tap Sign In and enter the email address associated with your Uphold account.
- Enter your account password. If you configured a passphrase or secondary identifier during registration, follow the prompts.
- If two-factor authentication (2FA) is enabled, provide the current code from your authenticator app or confirm the push/biometric request on the registered device.
- After successful verification, you will be signed in and redirected to your Uphold dashboard where you can view balances and recent activity.
Note: Uphold may require additional identity verification (KYC) for access to certain features or higher limits. Ensure your account information is accurate and complete to avoid access interruptions.
Two-Factor Authentication (2FA) Options
Uphold supports multiple 2FA mechanisms to add a strong second layer of protection. Enabling 2FA dramatically reduces the risk of account takeover even if your password is compromised.
Authenticator Apps
Use an authenticator app (Google Authenticator, Authy, Microsoft Authenticator, etc.) to generate time-based one-time codes (TOTP). Authenticator apps are widely regarded as secure and convenient; store your account recovery codes when you enable TOTP.
Hardware Security Keys
Hardware keys (FIDO2 / U2F) provide phishing-resistant authentication by using public-key cryptography. Register a hardware key as a 2FA method for the strongest protection against remote attacks.
Biometric Sign-In & Device Security
On mobile devices, you can enable biometric unlock (fingerprint, Face ID) for convenient access. Biometrics are stored securely on your device and provide a balance of security and usability. However, biometric unlock is typically gated by your device-level passcode and should complement, not replace, strong account-level protections like 2FA and a unique password.
Sessions & Device Management
Uphold maintains a record of recent sessions and active devices. Regularly review connected devices and sign out sessions you do not recognize. If you notice unknown activity, immediately change your password and disable active sessions from the account security settings.
Password & Account Security Best Practices
- Use a unique, strong password for your Uphold account. A password manager helps generate and store long, random passwords.
- Never reuse your Uphold password on other sites or services.
- Enable 2FA and prefer hardware keys or TOTP authenticator apps over SMS-based codes (SMS can be intercepted via SIM swapping).
- Monitor your account activity and set up optional email or mobile notifications for important events.
Troubleshooting Sign-In Issues
Forgot Password
- On the sign-in page, click Forgot password?.
- Enter your registered email address to receive a password reset link.
- Check your email (including spam/junk folders) and follow the link to set a new password. The reset link is typically time-limited for security.
Lost 2FA Device
If you lose access to your authenticator app or hardware key, use your previously stored recovery codes to regain access. If recovery codes are not available, follow Uphold’s account recovery flow — this may require identity verification and take several days to complete to protect your assets.
Account Locked or Suspended
If your account is temporarily locked due to suspicious activity or failed attempts, contact Uphold support through official channels. Be prepared to provide requested verification details to restore access.
Recognizing Phishing & Scam Attempts
Phishing is the most common attack vector. Always confirm you are on Uphold’s official domain before entering credentials. Red flags include unsolicited emails, links that ask for your password or seed phrases, and messages requesting you to move funds urgently. Uphold will never ask for your full password, recovery seed, or 2FA codes in unsolicited communications.
- Verify domain and SSL certificate in the browser address bar.
- Hover over links to inspect their destination before clicking.
- Do not enter credentials on pages reached from emails or social media without confirming legitimacy.
Privacy & Notification Settings
Review your account privacy settings to control email and push notifications. Enabling account alerts for sign‑ins, withdrawals, and password changes helps you detect unauthorized activity quickly. Consider enabling stricter notifications for large withdrawals or administrative changes.
Business & Enterprise Accounts
Uphold provides enterprise features for institutional users, including enhanced access controls, team management, and API access. Business accounts typically require additional verification and admin-level settings for role-based access. Consult Uphold’s enterprise documentation to configure secure team sign-in flows, audit logs and withdrawal policies.
Using the Mobile App
The Uphold mobile app provides a secure, convenient way to sign in, view balances and perform transactions. For faster sign-in, enable biometric unlock and remember to keep the app updated. On mobile, protect your account by enabling device-level security (screen lock, encryption) and avoid using public Wi‑Fi when performing high-value actions.
Signing Out & Session Expiration
Always sign out of shared or public devices after use. Uphold may automatically expire sessions after periods of inactivity — this reduces exposure if a device is lost or left unattended. You can also remotely sign out active sessions from your account security settings.
Support & Account Recovery
If you cannot regain access to your account through the standard recovery flows, contact Uphold support using official channels. Expect identity verification to include government ID and other supporting documents; this process protects against fraudulent recovery attempts and helps secure funds.
Legal, KYC & Compliance Notes
Uphold operates under financial regulations in jurisdictions where it provides services. Some features may be restricted until identity verification (KYC) is completed. Be sure to read Uphold’s terms of service and privacy policy to understand rights, obligations and dispute procedures related to account access and transactions.
Quick Sign-In Security Checklist
- Use a unique password and a password manager.
- Enable 2FA (authenticator app or hardware key).
- Store recovery and backup codes securely offline.
- Review active sessions and revoke unknown devices.
- Enable email and push notifications for critical events.