How to change your password
You can strengthen your account security by changing your Paribu password at regular intervals or when you notice a suspicious situation. The password change is performed via security settings, after the layered authentication is completed.
How is the password changed?
To change your password on Paribu, click Change password from security settings, verify your identity using the method active on your account, then enter your current password and new password and save. After the action, for your security, no crypto asset withdrawal can be made for 48 hours.
Before you start
- Make sure you have access to your registered phone number and email address
- Your new password must be at least 8 characters long and contain at least 1 uppercase letter, 1 lowercase letter, and 1 digit; it must not contain sequential numbers (such as 123) or the same character repeated consecutively
Change your password
- Open Paribu.com and hover over the profile icon at the top right
- Click Security settings in the menu that appears
- Click Change password
- Verify your identity using the method active on your account (details below)
- Enter your current password and new password, then enter the new password again to confirm
- Click the Save button
After the action is complete, a notification email is sent to your registered email address and you are signed out of your account. You can sign in with your new password.
How does authentication work?
Before you change your Paribu password, a layered authentication step is triggered to ensure that only the account holder can make this change. The authentication method is determined automatically based on the security features active on your account; whichever of passkey, two-factor authentication (2FA), and SMS + email is suitable, in that order, is used.
| Priority | Method | Condition |
|---|---|---|
| 1 | Passkey | If a passkey is active on your account |
| 2 | Two-factor authentication (2FA) | If no passkey, but Google Authenticator is active |
| 3 | SMS + email verification | If neither passkey nor 2FA is active |
Verification with a passkey: Your device's native verification screen opens automatically; you verify your identity using your face, fingerprint, or device password.
Verification with 2FA: You open the Google Authenticator app and enter the 6-digit code generated for Paribu on the verification screen.
SMS + email verification: Two separate codes are sent to your registered phone number and registered email address. After both are verified, you proceed to the password change screen.
Note: SMS and email verification codes are valid for a short time. You can request expired codes again.
If you are not receiving the verification code
If you cannot receive the SMS or email verification code, check the steps below:
- Make sure your registered phone number and email address are up to date
- Check your SMS blocking filters and email spam folder
- Wait a few minutes, then request the code again
If the issue with code delivery persists, you can start the live support chat through Paribu Support to contact us.
Password requirements
Your Paribu password must comply with the rules below. While you enter your password, a green check mark must appear on the screen for each rule.
- At least 8 characters long
- Contain at least 1 uppercase letter (A-Z)
- Contain at least 1 lowercase letter (a-z)
- Contain at least 1 digit (0-9)
- Must not contain sequential numbers (such as 123, 210)
- Must not contain repeated characters in a row
Note: For a strong password, avoid information that is easy to guess such as date of birth, Turkish ID number, or phone number. Set your Paribu password as different from passwords you use on other platforms.
48-hour restriction after a password change
After you change your password, for your security, no crypto asset withdrawal can be made for 48 hours. This period ensures that the assets in your account are protected against unauthorized access attempts. While the restriction is in effect, when you try to withdraw a crypto asset, the remaining time information is shown on the screen; the restriction is automatically lifted when the period ends.
Frequently asked questions
How often should I change my password?
It is recommended to change your password at least every 3-6 months. In addition, it is important to update your password immediately if you notice suspicious activity, have used your password on another platform, or have lost your device.
I do not know my current password. What should I do?
If you do not know your current password, you need to use the password reset flow instead of the password change screen. For details, see the Forgot my password, what should I do? article.
If both passkey and 2FA are active, which one is used?
If a passkey is active, the passkey is always used as the priority method. 2FA only comes into play if a passkey is not active.
Can I skip the authentication screen?
No. The layered authentication is required for a password change and cannot be skipped. If no security method is active on your account, SMS + email verification is used.
Does the 48-hour restriction affect trading actions?
No. The 48-hour restriction applies only to crypto asset withdrawal actions. After you change your password, you can continue with TRY withdrawals, TRY deposits, crypto deposits, and trading actions without interruption.
Why was I signed out after I changed my password?
For your security, when the password change is complete, Paribu ends all your sessions. This ensures that only you have access to your account when you sign in again with your new password.
Related articles
- Forgot my password, what should I do? — Password reset steps
- Security tips — Tips for account security
- How to set up two-factor authentication (2FA) — Setting up 2FA authentication
- What is a passkey? — What a passkey is
- How to enable biometric authentication — Enabling biometric login