Cryptocurrency exchanges need to empower users to fully secure their accounts to protect themselves from phishing attacks and account takeovers. Account security using modern authentication standards can achieve this without sacrificing user convenience and privacy.