What Secure Access Covers on 18bd
When you open your account, 18bd assigns a unique login path that ties your mobile number to a one-time password sent at each session. That OTP step is not optional — it sits between your credentials and the lobby every time you log in. Wallet linking goes through a separate verification step: your bKash, Nagad or Rocket number must match the name
on your account before any withdrawal clears. If you switch devices, you will be asked to re-confirm via OTP. Session tokens expire after inactivity, so an idle tab does not stay open indefinitely. These controls run together to make sure your funds and account data stay under your control, not anyone else's.