How-to
Securing your betting account: passcode, biometrics and 2FA
Four layers protect a betting account on your phone: a passcode, biometrics, a second factor and updates. Set the passcode first, add the biometric option, switch on two-factor authentication where the operator offers it, then update the phone and the app. Our estimate is 15 minutes. Steps for iPhone and Android follow.
Editorial team · checked
What you need
- Your phone and its current passcode or PIN.
- Your betting login and the e-mail address on the account.
- A second device, if you have one, to test a code.
- Access to the phone's Settings and to the app's account area.
In short: the phone, the login and 15 minutes of settings.
The four layers
| Layer | What it does | Where you set it | Status |
|---|---|---|---|
| Phone passcode | Stops a stranger opening the phone | Phone Settings | Menu names Not checked |
| Biometrics | Opens the phone or the app with a face or fingerprint | Phone Settings, then the app if offered | App support Not checked |
| Second factor | Asks for a code in addition to the password | Betting account settings | Not checked for any operator |
| Updates | Fixes known security faults | Phone Settings and the store | Menu names Not checked |
Read what two-factor authentication means.
In short: each layer covers a different way in.
Steps on iPhone
- Set a passcode.
- Do: open Settings and find the Face ID and passcode section. Choose a long passcode, not a short repeating one.
- Result: the phone asks for the passcode to open.
- Turn on Face ID.
- Do: in the same section, enrol your face. In the betting app, switch on biometric sign-in if it offers it.
- Result: the app opens with your face or the passcode.
- Switch on the second factor.
- Do: open the betting account's security settings and enable two-factor authentication if listed.
- Result: a code is needed at sign-in. If the account has no such option, write that down.
- Update.
- Do: run the iOS software update and the App Store update for the app.
- Result: both show as current.
Menu names can change between iOS versions: Not checked against Apple's current help.
In short: passcode, Face ID, code, updates.
Steps on Android
- Set a screen passcode or PIN.
- Do: open Settings, then the security section. Menu names differ by phone maker.
- Result: the phone asks for a PIN or pattern to open.
- Add a fingerprint or face option.
- Do: enrol it in the same section. In the app, switch on biometric sign-in if offered.
- Result: the app opens with your biometric or the PIN.
- Switch on the second factor.
- Do: open the betting account's security settings and enable two-factor authentication if listed.
- Result: a code is needed at sign-in.
- Update.
- Do: run the system update and the Google Play update for the app. Keep Play Protect on.
- Result: both show as current.
Menu names are Not checked against Google's current help.
In short: PIN, biometric, code, updates.
Signs of a phishing message
These are editorial pointers, not operator advice. The operator lists are Not checked.
- A message with a link asks you to sign in or "verify" your account.
- It asks for your full password or a code you received.
- It pushes you to act within minutes.
- The sender or link does not match the operator's site.
Open the app yourself, not the link. See the eight red flags of a fake app or advert and how to report one.
In short: never sign in through a link in a message.
If it did not work, or the phone is lost
- The app has no second factor. Use a strong, unique password and keep the phone passcode on. Write down "No second factor offered" with the date.
- The phone is lost. Use your phone's find service, then change the betting password from another device. Tell the operator in writing and ask for a pause on the account.
- Someone else uses your phone. Read the shared phone checks.
In short: change the password from another device first.
How we checked, what changed, caveats
In short: the layers are standard; the menu names need a dated check.
Keep going