Walltime Authentication: Methods, Setup & Security (2026)

Authentication overview

Walltime, an Australian cryptocurrency exchange founded in 2014, provides a platform for buying, selling, and storing cryptocurrencies, with a focus on AUD fiat on/off-ramps. Authentication on Walltime is designed to secure user accounts and transactions within its web-based interface. The system mandates a combination of email and password for initial login, coupled with a compulsory Two-Factor Authentication (2FA) layer. This multi-factor approach aims to protect user assets and personal data against unauthorized access.

Beyond basic login, Walltime implements Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance procedures. These regulatory requirements necessitate users to provide identification documents to verify their identity, which is an integral part of gaining full access to deposit, withdrawal, and trading functionalities. While Walltime offers a user-facing exchange, it does not currently provide a publicly documented API or SDK for external developer integration, meaning all authentication processes are handled directly through the Walltime website interface.

Supported authentication methods

Walltime primarily supports a robust, multi-layered authentication strategy for its user accounts. The core method involves standard email and password credentials, which are then fortified by mandatory Two-Factor Authentication (2FA).

Email and Password

Users create an account with a unique email address and a strong password during the registration process. This combination serves as the primary credential set for accessing the Walltime platform. Walltime recommends using strong, unique passwords that combine uppercase and lowercase letters, numbers, and symbols to mitigate brute-force and dictionary attacks.

Two-Factor Authentication (2FA)

To enhance account security, Walltime requires all users to enable Two-Factor Authentication (2FA). This adds an additional layer of security beyond just a password. After entering their email and password, users must provide a secondary verification code generated by an authenticator application. This ensures that even if a password is compromised, an unauthorized individual cannot access the account without physical access to the user's 2FA device.

• Authenticator Apps: Walltime supports time-based one-time password (TOTP) generators, commonly found in applications like Google Authenticator or Authy. During 2FA setup, users scan a QR code or manually enter a setup key into their chosen authenticator app, which then generates a new code every 30-60 seconds. Google's support documentation on 2FA provides further details on how these systems work.

Account Verification (KYC/AML)

While not an authentication method in the traditional sense, completing Know Your Customer (KYC) and Anti-Money Laundering (AML) verification is a prerequisite for full account functionality, including deposits, withdrawals, and trading. This process involves submitting government-issued identification and potentially proof of address. Walltime's compliance with these regulations is detailed on their official website, ensuring a secure and regulated trading environment.

Summary of Authentication Methods

Getting your credentials

Accessing Walltime requires setting up an account directly through their web platform. There are no API keys or SDKs for external integration, so credentials refer to your user login details.

Account Registration

1. Visit the Walltime Website: Navigate to the official Walltime homepage.
2. Initiate Registration: Look for a 'Sign Up' or 'Register' button and click it.
3. Provide Email and Password: You will be prompted to enter a valid email address and create a strong password. Follow Walltime's password complexity requirements, which typically include a minimum length, use of uppercase and lowercase letters, numbers, and special characters.
4. Verify Email: Walltime will send a verification link to your registered email address. Click this link to confirm your email and activate your account.
5. Set Up 2FA: Upon first login or shortly thereafter, Walltime will guide you through the mandatory Two-Factor Authentication setup. This usually involves displaying a QR code that you scan with an authenticator app (e.g., Google Authenticator) on your mobile device. Ensure you save any recovery codes provided during this setup process in a secure, offline location.
6. Complete KYC/AML: To unlock full trading capabilities, including depositing and withdrawing funds, you will need to complete the Know Your Customer (KYC) and Anti-Money Laundering (AML) verification process. This typically involves uploading identification documents (e.g., passport, driver's license) and potentially proof of address.

Your primary credentials for Walltime will be the email and password you set during registration, along with the 2FA codes generated by your authenticator app.

Authenticated request example

Since Walltime does not provide a public API or SDK for external developer use, there isn't a programmatic example of an authenticated request using cURL or a similar tool. All interactions, including login, trading, and account management, are performed directly through the Walltime web interface. Users authenticate by:

1. Navigating to the Walltime login page.
2. Entering their registered email address.
3. Entering their password.
4. Providing the current 2FA code from their authenticator app.

Once these steps are completed successfully, the user's browser session is authenticated, allowing them to perform actions within the platform according to their account permissions and verification status.

Security best practices

Maintaining the security of your Walltime account is crucial for protecting your digital assets. Adhering to these best practices can significantly reduce the risk of unauthorized access.

Strong, Unique Passwords

• Create a password that is complex and unique to Walltime. Avoid using easily guessable information such as birthdays, names, or common words.
• Use a combination of uppercase and lowercase letters, numbers, and special characters.
• Never reuse passwords from other online accounts. If one account is compromised, a unique password prevents attackers from accessing your Walltime account.
• Consider using a reputable password manager to generate and securely store complex passwords. The FIDO Alliance advocates for strong authentication standards, including password best practices.

Mandatory Two-Factor Authentication (2FA)

• Enable and Maintain 2FA: Walltime requires 2FA, specifically through authenticator apps. Ensure your authenticator app is always active and properly synced.
• Secure Recovery Codes: When setting up 2FA, you will receive recovery codes. Print these out or write them down and store them in a secure, offline location (e.g., a safe deposit box, a locked safe). Do not store them digitally on your computer or cloud storage. These codes are essential for regaining access if you lose your 2FA device.
• Protect your 2FA Device: Keep your mobile device (where your authenticator app is installed) secure with a strong passcode or biometric lock.

Phishing Awareness

• Verify URLs: Always double-check the URL to ensure you are on the official Walltime website (https://waltime.com/). Phishing sites often mimic legitimate sites with subtle changes in the URL.
• Be Suspicious of Emails: Walltime will never ask for your password or 2FA codes via email. Be wary of unsolicited emails, especially those asking for personal information or containing suspicious links.
• Report Suspicious Activity: If you receive a suspicious email or encounter a questionable website purporting to be Walltime, report it to Walltime's support team immediately.

Regular Security Checks

• Monitor Account Activity: Regularly review your Walltime account for any unfamiliar transactions or login attempts.
• Keep Software Updated: Ensure your operating system, web browser, and antivirus software are always up to date. Software updates often include critical security patches.
• Use Secure Networks: Avoid accessing your Walltime account on public Wi-Fi networks, which can be vulnerable to eavesdropping. Use a Virtual Private Network (VPN) if you must access your account on an unsecured network.

Device Security

• Antivirus and Anti-malware: Install and maintain reputable antivirus and anti-malware software on all devices you use to access Walltime.
• Firewall: Ensure your operating system's firewall is enabled to prevent unauthorized network access to your device.
• Lock Your Device: Always lock your computer or mobile device when stepping away, even for a short period.