Nothing moves without your YES.
Every payment and every trade passes these checks. If one of them fails, nothing moves and you get a plain explanation.
Trades have their own guardrails
Price protection at your YES, risk flags before you buy, a simulation before anything is signed, and quotes that expire after 90 seconds.
Face ID, if you want it
A YES is the default. Text SECURITY and you can have payments wait for a look at your iPhone instead: every payment and trade, or only those over an amount you pick. Your face never leaves your phone. Face ID unlocks a passkey stored on your iPhone, and we only ever receive a signature from it.
One tap, one look
The link opens a page with the amount and who gets it, and one button. Tap it, look at your phone, done. The link works once, only for that payment, and only until the request expires.
It covers exporting your key too. Lost your passkey? Text SECURITY RESET and Face ID turns off after 48 hours, so nobody can switch it off on the spot.
1. An exact YES.
Only a clear YES confirms. “Sure”, “ok” or anything an AI thinks you meant is never taken as a yes.
2. Expires in 5 minutes.
Forget to reply and the request quietly expires. Nothing is ever sent later behind your back.
3. Exactly once.
Double taps, retries and network hiccups can never send the same payment twice. The database won’t allow it.
4. $5,000 a day, by default.
Sends to other people are capped daily. Raising the cap takes 12 hours, so a stolen phone can’t empty your wallet.
5. Keys in a secure enclave.
Wallets are held by Privy in hardware-isolated enclaves, locked by policy to transfers and the trades you approve.
6. Verifiable by anyone.
Every payment and trade settles on Solana with a public receipt you can check yourself on Solscan.