Summary
2FA installs an on-chain hook that can require an email OTP for transactions. The spending limit is a step-up threshold: sends above it pause for an OTP and continue after you submit the code. It is not a hard cap. Do things in order: install the hook, bind your email, then set the limit.
Ask your agent
Show my Elytro security status and explain each item in normal language.
Turn on on-chain 2FA for my wallet. Confirm the account is deployed first, tell me what will feel different day to day, and wait for my ok before you change anything on-chain.
Link my personal email for wallet OTP codes. Walk me through what I'll see (inbox, spam, codes). Don't submit anything until I confirm the exact address. If Elytro pauses for email verification, tell me and I'll send you the code so you can finish the step.
Set my step-up spending threshold around $100 (or suggest a lower starting point). Remind me it's not a hard cap: bigger sends wait for email confirmation, then go through. Then show security status again.
Before you approve
- The account is deployed on the chain where you are installing 2FA (activation done).
- You ran the steps in order: 2FA hook install → email bind → spending limit. Without the hook first, the later commands leave the account unprotected on-chain.
- You get that the spending limit is a step-up threshold, not a hard block. Bigger sends pause for OTP, then continue.
If something goes wrong
- No OTP: spam folder, bound address (
elytro security status), mailbox actually works. - Removing 2FA:
elytro security 2fa uninstall. Read the docs on any delay before you confirm.
Further reading
- Security docs (2FA, email, spending limits)
- Give your agent its own email (not the same as wallet 2FA email)
FAQ
- Do limits replace 2FA?
- No. The limit is a step-up: bigger sends ask for an OTP, then go through after you submit the code. You need the 2FA hook first, then the limit.