US Individual User Agreement — July 22, 2026 version

Coinbase · agreement dated July 22, 2026 · Official agreement

Read the agreement

4 of 303 cards in Security & Safeguards

Security & Safeguards · Company practice

Coinbase stores private keys online and offline; offline retrieval can delay transfers

Your Digital Asset Wallet lets you store, track, transfer and manage balances of Supported Digital Assets. Coinbase securely stores the private keys used to process transactions in a combination of online and offline storage. Because of its security protocols, Coinbase may need to retrieve private keys or related information from offline storage to carry out Digital Asset Transfers, and you acknowledge this may delay the initiation or crediting of a transfer.

Supporting quotations

Your Digital Asset Wallet allows you to store, track, transfer, and manage your balances of Supported Digital Assets.
We securely store Digital Asset private keys, which are used to process transactions, in a combination of online and offline storage.
it may be necessary for us to retrieve private keys or related information from offline storage in order to facilitate Digital Asset Transfers (as defined below) in accordance with your instructions, and you acknowledge that this may delay the initiation or crediting of such Digital Asset Transfers.

Security & Safeguards · Restriction or exception

Report suspected account compromise or security incidents immediately; prompt reporting does not guarantee reimbursement

If you suspect your account or security details are compromised, or know of fraud, attempted fraud or any security incident including a cyber-attack affecting you or Coinbase, you must notify Coinbase Support immediately and give accurate, up-to-date information throughout. You must take any steps Coinbase reasonably requires to reduce or manage the breach. Prompt reporting does not guarantee Coinbase will reimburse you or be liable for your losses.

Supporting quotations

you must notify Coinbase Support immediately
provide accurate and up to date information throughout the duration of the Security Breach
You must take any steps that we reasonably require to reduce or manage any Security Breach.
Prompt reporting of a Security Breach does not guarantee that Coinbase will reimburse you for any losses suffered or be liable to you for any losses suffered as a result of the Security Breach.

Security & Safeguards · Restriction or exception

Coinbase disclaims liability for viruses, phishing and spoofing and advises logging in through the site

Coinbase is not liable for damage or interruptions from computer viruses, other malicious code, phishing, spoofing or other attacks affecting your equipment. It advises using reputable virus protection and warns that SMS and email are vulnerable to spoofing and phishing. If unsure whether a message really came from Coinbase, log in through the Coinbase Site to review transactions or required actions.

Supporting quotations

We shall not bear any liability, whatsoever, for any damage or interruptions caused by any computer viruses or other malicious code that may affect your computer or other equipment, or any phishing, spoofing or other attack.
SMS and email services are vulnerable to spoofing and phishing attacks
Always log into your Coinbase Account(s) through the Coinbase Site to review any transactions or required actions

Security & Safeguards · Restriction or exception

You must secure your credentials; Coinbase is not liable for compromised credentials or Trusted Contacts

You are responsible for creating a strong password and keeping secure all devices, IDs, emails, passwords, PINs, API keys and other codes used to access the Services, and for keeping your email and phone current to receive notices. Loss or compromise may allow third parties to access your account and cause loss of assets and funds, including linked bank accounts and credit cards. You should never allow remote access or share your screen when logged in. Coinbase says it will never ask for your passwords, 2-factor codes or screen sharing. It is not liable for loss from compromised login credentials, including passkeys, or from your use of Trusted Contacts, or for your failure to act on notices. If you think your account is compromised, contact Support immediately.

Supporting quotations

You are responsible for creating a strong password and maintaining security and control of any and all electronic devices, IDs, email addresses, passwords, hints, personal identification numbers (PINs), API keys or any other codes that you use to access the Coinbase Services.
You are responsible for keeping your email address and telephone number up to date in your Account Profile in order to receive any notices or alerts that we may send you.
You should never allow remote access or share your computer and/or computer screen
Coinbase will never under any circumstances ask you or your Trusted Contacts for your passwords, 2-factor authentication codes, or to screen share
Coinbase is not liable for any loss that you may sustain due to the compromise of your account login credentials (including passwordless credentials such as Passkeys and any other means of authentication) or resulting from your use of the Trusted Contacts feature.
Coinbase is also not liable for your failure to follow or act on any notices or alerts that we may send to you.