Bybit custody hygiene: sessions, whitelists, and cool-downs
Most Bybit account drains that start with phishing succeed because withdrawals were unrestricted and old sessions were still alive. Hygiene is unglamorous: whitelist destinations, label them, honour cool-downs, and end unfamiliar sessions on a schedule. This guide turns those habits into a monthly checklist you can run without waiting for a crisis email from a friend who lost funds the same way.
Enable and maintain withdrawal whitelisting
Open Bybit withdraw security controls and enable address whitelisting, completing any 2FA challenge required before you trust the toggle. Read cool-down warnings so later edits do not surprise you mid-exit. Add addresses per network with labels you will understand months later, and compare characters against a wallet you control before saving each entry.
Live with cool-downs instead of fighting them
Password, authenticator, and whitelist edits often pause withdrawals for a period shown on screen. Schedule large exits before casual security changes whenever you can. Ignore anyone offering to lift holds for a fee through chat. Use Bybit’s help centre if a hold exceeds what the UI promised and you have a legitimate need documented with timestamps.
Review device sessions monthly
Open device or session management and end logins you do not recognise from travel, old browsers, or shared computers. Pair this with a passkey or authenticator check on hardware you still hold. A calendar reminder for this review beats an emergency scramble after funds move without you. Check the API management page in the same sitting and delete keys you no longer use.
Tie hygiene to travel weeks specifically
Before trips, confirm the whitelist contains only wallets you can unlock while away, and remove destinations you will not need on the road. After returning, end hotel-network sessions and re-check that no surprise addresses appeared during cool-down windows. Travel weeks are when rushed edits and forgotten sessions most often collide into avoidable risk. If you lent a device to family during the trip, assume sessions need a full review even when nothing “looked wrong” in the wallet balance.
Risk boundary: Bybit Independent Review
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.
Scenario checkpoint
- Enable Bybit withdrawal whitelisting and finish required 2FA challenges.
- Add addresses with correct networks and characters checked against your wallet.
- Honour cool-downs after security edits without seeking unofficial overrides.
- End unfamiliar sessions monthly and tighten the whitelist before travel.