Reference

Your 18bd Account, Locked Down the Right Way

Secure access at 18bd means your login, your wallet link and your session are all protected by layered verification — so only you get in. From your first OTP to every withdrawal request, the account stays yours.

OTP LoginSession ControlsWallet VerificationDevice Lock
18bd Your 18bd Account, Locked Down the Right Way
18bd What Secure Access Covers on 18bd

What Secure Access Covers on 18bd

When you open your account, 18bd assigns a unique login path that ties your mobile number to a one-time password sent at each session. That OTP step is not optional — it sits between your credentials and the lobby every time you log in. Wallet linking goes through a separate verification step: your bKash, Nagad or Rocket number must match the name

on your account before any withdrawal clears. If you switch devices, you will be asked to re-confirm via OTP. Session tokens expire after inactivity, so an idle tab does not stay open indefinitely. These controls run together to make sure your funds and account data stay under your control, not anyone else's.

ACCESS HELP PATHS

Help When You Cannot Get In

Locked out or seeing an error at login? Our support team handles account access issues directly — reach us through live chat or the account help form. We verify your identity first, then restore access without bypassing the security steps that protect you.

Live Chat Start a live chat session from the login screen. Our team can walk you through OTP resets and account recovery without asking for your password.
Account Help Form Submit the account help form with your registered mobile number. Wallet name matching — bKash, Nagad or Rocket — speeds up the identity check.
Wallet Verification Support If your linked wallet is not clearing for withdrawals, our verification team checks the name match and flags the mismatch so you can correct it quickly.
SECURITY SIGNALS

How We Keep Your Account Honest

Secure access is not just a login screen. Every layer here — OTP, wallet matching, session expiry, device checks — runs to keep your account data and wallet balance under your control. Here is what sits behind the scenes.

OTP at Every Login

A fresh one-time password is sent to your registered mobile number each session. No static password alone opens your account — the OTP step cannot be skipped.

Wallet Name Matching

Your bKash, Nagad or Rocket number must match the name registered to your 18bd account. Mismatches are flagged before any withdrawal is processed.

Session Expiry Controls

Idle sessions time out automatically. An open tab left unattended will not stay logged in — a straightforward control that stops unauthorised account use.

Device Re-verification

Logging in from a new device triggers an extra OTP check. Your account does not assume a new device is safe — it asks you to confirm before loading the lobby.

Secure Access Terms You Should Know

These are the specific terms that come up when you manage your login, verify your wallet or recover your account on 18bd. Plain definitions, no jargon.

What is an OTP in account login?

OTP stands for one-time password — a short code sent to your mobile number that expires after a single use, confirming only you are attempting to log in.

What does wallet name matching mean?

Wallet name matching checks that the name on your bKash, Nagad or Rocket account matches the name registered to your 18bd profile before a withdrawal proceeds.

What is a session token?

A session token is a temporary credential your browser holds while you are logged in. It expires after inactivity, ending your session and requiring a fresh login.

What is two-factor authentication (2FA)?

2FA adds a second check — usually an OTP — on top of your password. Even if someone knows your password, they still need the code sent to your phone.

What is KYC in account verification?

KYC means Know Your Customer — the identity check that confirms your name, mobile number and wallet details are consistent before withdrawals or higher-limit actions are approved.

What does account recovery mean?

Account recovery is the process of regaining access when you are locked out — verified through your registered mobile number and wallet name match, not by resetting security controls.

Common Questions About Secure Access

These are the questions we hear most from people managing their login and account security on 18bd. If your question is not here, reach us through live chat.

The OTP step runs on every login to confirm the person entering your password is actually you. It cannot be turned off — this is how 18bd keeps your account from being accessed by anyone else, even if your password is compromised.

Check that your registered mobile number is active and has signal. If the code still does not arrive after a minute, request a new one from the login screen. Persistent issues can be raised directly through live chat with your registered number ready.

Each account links to a verified wallet. If you want to change your linked bKash, Nagad or Rocket number, the new number goes through the same name-matching verification before it is accepted.

Your session expired after a period of inactivity. This is a deliberate security control — idle sessions do not stay open. Log in again with your credentials and OTP to continue.

Yes. Logging in from a device that has not been used before triggers an extra OTP check. This protects your account if your credentials are ever used on an unfamiliar device without your knowledge.

Make sure the name on your bKash, Nagad or Rocket account is exactly the same as the name you registered with on 18bd. Even a small spelling difference will flag the withdrawal for manual review before it clears.
Reference

Secure Access Bangladesh

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.