The withdrawal whitelist is an important security feature on Binance. When enabled, your account can only withdraw to pre-approved addresses. Even if hackers take control of your account, they can't send your coins to their own wallets. But it also comes with some inconvenience — whether to enable it requires weighing the trade-offs. If you don't have an account, register on Binance first.
How the Withdrawal Whitelist Works
Before enabling: You can withdraw to any address, just pass security verification.
After enabling: You can only withdraw to addresses on your whitelist. To withdraw to a new address, you must first add it to the whitelist and wait 24 hours before it becomes active.
The 24-hour waiting period is key. Even if a hacker controls your account and adds their address, you have 24 hours to detect the anomaly and take action.
How to Enable It
- Log into the Binance app or web
- Go to "Security Settings"
- Find "Withdrawal Whitelist"
- Tap Enable
- Complete security verification (Google Authenticator + SMS/email code)
How to Add Whitelist Addresses
- Security Settings, then Withdrawal Whitelist, then Add Address
- Enter the following:
- Currency (e.g., USDT)
- Network (e.g., TRC20)
- Address
- Label (e.g., "My MetaMask")
- Complete security verification
- Address added successfully, but requires a 24-hour wait before use
Benefits of Enabling the Whitelist
1. Prevent Fund Theft After Account Compromise
This is the core protection. Even if a hacker:
- Knows your password
- Gets your Google Authenticator code
- Has full control of your account
To withdraw to their address, they must add it to the whitelist and wait 24 hours. This gives you ample time to detect the issue and freeze your account.
2. Prevent Accidental Errors
Whitelist addresses are all verified and correct. When withdrawing, selecting from the whitelist prevents accidentally copying a wrong address.
3. Reduce Phishing Risk
Even if you accidentally initiate a "withdrawal" on a phishing site, since the target address isn't on your whitelist, the withdrawal won't succeed.
Inconveniences of the Whitelist
1. 24-Hour Wait for Every New Address
If you frequently withdraw to different addresses (e.g., DeFi operations), having to add each address 24 hours in advance is cumbersome.
2. Emergency Withdrawals May Be Blocked
In some urgent situations where you need to immediately send coins to a new address, the 24-hour waiting period prevents it.
3. Requires Planning Ahead
You need to pre-add all addresses you might use. Deciding to withdraw to a new address on the spot becomes inconvenient.
Should You Enable It?
Strongly Recommended If:
- Your account holds significant assets (more than your annual income)
- You don't frequently withdraw to new addresses
- You mainly use Binance internally (trading, earn, etc.)
- You've had account security incidents before
Can Consider Not Enabling If:
- You frequently withdraw to different DeFi protocols
- Your account holds very little
- You've already set up other strong security measures (2FA, strong password, etc.)
Compromise Solution
Enable the whitelist but pre-add all your commonly used addresses (personal wallet, main exchange accounts, etc.). This way daily use is unaffected while security improves dramatically.
Whitelist Management Tips
- Label each address clearly: e.g., "MetaMask-ETH Mainnet," "OKX-TRC20" for easy identification
- Regularly clean unused addresses: Remove whitelist addresses you no longer use to reduce attack surface
- Verify address correctness: Confirm addresses are correct before adding, then test with a small withdrawal
- Add each network separately: The same address on different networks needs to be added individually
FAQ
Q: How many addresses can be whitelisted?
There's typically no strict limit — you can add as many as needed.
Q: Does removing a whitelist address require a waiting period?
Removal is usually instant, with no waiting period. Specific rules may change.
Q: Do internal Binance transfers go through the whitelist?
No. The whitelist only restricts withdrawals to external addresses. Internal account-to-account transfers within Binance are unaffected.
Q: Can I re-enable the whitelist after disabling it?
Yes. But both disabling and re-enabling require security verification and may have a cooldown period.
Q: Are existing whitelist addresses preserved when I disable and re-enable?
Usually yes. Previously added addresses remain valid after re-enabling.
The withdrawal whitelist trades "convenience" for "security." If your Binance account holds important assets, enabling it is strongly recommended. Spend a little time setting up your commonly used addresses upfront, and you add a solid layer of protection for your assets.