Protect your account
Locking down a Duelbits login: 2FA, the recovery key and a fixed email
Duelbits' help centre, as archived on 15 May 2025, pairs logins with an authenticator app that makes a new code every 30 seconds, and says a registered email cannot be changed. Here is how those pieces fit, what support asks for when something goes wrong, and an eight-step checklist for any casino.
Duelbits' account security rests on 4 pieces described in its help centre as archived on 15 May 2025: an authenticator code that changes every 30 seconds, a secret recovery key, a password you can reset by email, and an email address that stays fixed for the life of the account. Two more items, a transaction hash and a round ID, are what support asks for when a deposit or a bet goes wrong.
We have no Duelbits account, so the steps below are the help centre's, in our words.
Two-factor authentication
The 2FA article describes the setup in four moves. Install an authenticator app such as Authy or Google Authenticator on your phone or computer. Open the Security page on Duelbits. Scan the QR code shown there to link the account to the app. Enter the code that appears in the app under the Duelbits entry with your email beside it.
From then on a 2FA code is needed to log in, and the article says the code is required whenever an action such as logging in is performed. The app produces a fresh code every 30 seconds, so a code read over your shoulder goes stale quickly. The site's own interface text, archived on 18 April 2022, describes it as a 6-digit code and asks for the same code to switch 2FA off. Duelbits' own FAQ data, archived on 3 June 2026, still presents 2FA as an optional extra, listed alongside 256-bit SSL encryption.
The setup also hands you a secret recovery key. The article is blunt about it: keep it to yourself, because it can be used to switch 2FA off. Whoever holds that key can undo the protection it came with. Write it on paper or store it in a password manager, and keep it away from screenshots, email drafts and chat windows.
Password and email
A password change happens on the same Security page: type the new password and press Change Password.
A forgotten password goes through email. On the Forgot Password page, or from the button under the login window, you enter the verified email on your account, and the article says a recovery email arrives within minutes with a link to set a new password.
That makes the email the real master key, and Duelbits fixes it in place. The help centre says the registered address cannot be changed, in an article marked as updated more than two years before the May 2025 copy. A separate article recommends verifying your email first thing after sign-up, because a verified address lets you restore the account if you lose access. The username, by contrast, can be changed under Display Name. Duelbits' error messages, archived on 1 February 2024, add two conditions: the email must be verified before 2FA can be added, and some email providers are blocked altogether.
Choose an address you will keep for years, and protect that inbox with its own 2FA.
The two IDs support asks for
A transaction hash for deposits. If a crypto deposit has not been credited, the help centre tells you to find the hash before contacting support, because they will ask for it. It sits in the history of the wallet you sent from, or in a block explorer once you open the transaction. If you bought crypto through an outside service and the transaction shows as pending, the article says that service is still processing it.
A round ID for games. For a problem with a bet, support may ask for the bet's ID. Click your username at the top right, open Transactions, find the round, double-click under the ID column and copy it.
The Welcome article, as archived on 24 January 2024, describes Live Support as staffed around the clock, every day of the week. The general section of the help centre, as archived on 14 August 2025, also lists an article titled Beware of Phishing: How to Stay Safe Online, though its text was not archived. The rules on when Duelbits asks for identity documents are on Duelbits KYC.
A checklist for any casino
- Turn on app-based 2FA before the first deposit, whatever the site.
- Store the recovery key offline. Treat it like a spare house key.
- Register with an email you will keep, and check whether the casino lets you change it later. Duelbits does not.
- Verify that email on day one, so password recovery works when you need it.
- Use a password found nowhere else. A reused one is only as safe as the weakest site that holds it.
- Save the transaction hash for every deposit and withdrawal, with the date.
- Note the round ID of any bet you might dispute, before the history scrolls away.
- Watch your inbox for ID requests. In our TrustDice money test in May 2026, the first request came once our withdrawals added up to roughly 5,000 USDT: an account review, then a Veriff link, a passport accepted at the fifth try, and later a further request sent by email. Vave, our advertiser, asked for no ID below 5,000 USDT when we tested it on 28 August 2026.
How other operators word their ID thresholds is compared on ID checks compared. The same eight steps apply to every one of the crypto casinos like Duelbits in our comparison.