Understand how Privy works, learn best practices for securing your account, and have your questions answered.
Frequently asked.
How Privy secures your account.
Proactive security
We use resource isolation and cryptographic architecture designed to prevent Privy or our its developers from ever touching your keys. Learn more
Active monitoring
Privy systems are instrumented for active monitoring. This means automated alerts triggered by unexpected or abnormal activity and 24/7 on-call security.
Battle-tested infrastructure
Privy uses a multi-layered security approach, with extensive audits and robust infrastructure failsafes, to protect your account.
Progressive defenses
Privy systems are securely architected from the ground up. We work to secure your assets and data.
How you can further secure your account.
Enable MFA
As your account grows in value, add multi-factor authentication (MFA) with passkeys, authenticator codes, and more.
Add another login method
Add an additional authentication method in case you are locked out of your account.
Back up to cloud
Back up your account to Google Drive or Apple iCloud to recover it on new devices.
Tips for protecting yourself online
Beyond this, it’s important to stay vigilant on the web to stay safe. Here are a few best practices on the web and onchain:
Always check the domain of a website you are connecting to.
Check the email sender before clicking a button or entering information.
Never volunteer information to a given person or domain if you are not sure why they need it, or they cannot prove that they are an appropriate party to share it with.
Understand what software is running. Software can be used to eavesdrop or steal data from you.
Do not save bookmarks in your browser on behalf of someone.
Do not install extensions in your browser that you do not understand.
Never disclose private information like login codes. Privy and its customers will never ask you for any log in codes, private keys, or any other private information that can be used to impersonate you. Never input login codes, passwords, private keys into a site you do not recognize.
Always backup critical information, such as recovery passwords, in a password manager.
If you’re ever unsure, take a step back to think through things. No matter how urgent something is, actions in self-custodial systems are often irreversible. You can always reach out to [email protected] with questions at any time.