Security

Nothing moves without you.

Every payment ends with a review, a slide and your confirmation. The ways you confirm and the places you are signed in are yours to check.

The confirmation step of a payment: six boxes for the code, a Send it again button with the note that sending it again does not give you more time, and the Confirm button
The Security settings: a passkey marked ready, with when it was last used and a Remove button, then buttons to add a passkey or an authenticator app

Three things you can check

How a payment is confirmed, what you confirm it with, and where you are signed in each have a page of their own.

Built so you can check it

Each of these is a screen in the app, not a promise on a page.

  • Passkeys and authenticator apps

    Payments are confirmed with a passkey, an authenticator app or a confirmation code. Settings lists your passkeys and authenticator apps, with when each was last used.

  • Security notices stay on

    You choose which notices reach you by push or email. The switch for security notices is locked on, and the screen says why.

  • The last way to confirm stays

    The app will not remove your only passkey or authenticator app: the screen says it is the only way left to confirm a payment.

  • Sign out everywhere else

    Sessions lists this device and every other session. One button signs out all the others and keeps you signed in here.

  • Hide balances

    One switch in Display settings covers every amount with the same row of dots until you show them again. Useful when someone else can see your screen.

The Sessions list: this device, marked, with when its session expires, and the Sign out everywhere else button below it
The Security row of the notification settings: security notices cannot be switched off, and its switch stays on

Every payment is reviewed, then confirmed by you.

The slide only creates the payment. Nothing leaves your account until your confirmation settles it.

Questions about security

How is a payment confirmed?

In three steps. The review shows what you pay and what they receive. Sliding creates the payment, but nothing moves yet. Then you confirm with a passkey, an authenticator app or a confirmation code, and only that settles it. Exchanges, trusting a payee and cancelling a standing order ask for the same confirmation.
How confirmations work

What is a passkey?

A passkey is a key kept on your device in place of a password. When a payment asks for it, your device asks you to unlock it the way you usually do, with a fingerprint, your face or the screen lock, and there is no code to type.
About passkeys

What if I lose my phone?

If you added a second way to confirm on another device, you keep confirming with that one, and from a device you are still signed in on you can sign out everywhere else. If you have lost access to every passkey and authenticator app, the Security screen starts a reset: you pass an identity check, then add a replacement.
Getting back in

Can I see where I am signed in?

Yes. Settings, then Sessions, lists every session: this device is marked, and each one shows when it ends. You can sign out on this device, or sign out everywhere else and stay signed in here.
About sessions

What if I type the wrong code?

The screen tells you the code is wrong, and you can try again. After too many wrong codes the confirmation closes, the payment fails and the money never left your account. You start again with a new payment. Asking for a new code does not add time.
What wrong codes do

See the confirmation step. Review, slide, confirm.

The page on confirmations walks through each step and lists everything else that asks you first.