Security

What the app does to protect your account

• Two-step sign-in. Turn it on under Security: after your password you enter a code from an authenticator app. You get recovery codes in case you lose your phone.
• Automatic sign-out. Your session ends after 15 minutes without activity.
• Extra check after failed sign-ins. After several wrong passwords we ask a security question before you can try again, and we tell you about the failed attempt.
• Alerts. We email you when someone signs in from a new device, and when your password, two-step sign-in or contact details change.
• Sign-in history. Your recent sign-ins, with the IP address, are listed under Security.
• Second person checks. Manual changes to balances by our staff need a second member of staff to approve them, and staff actions are recorded.
• Documents you can verify. Each document has a reference and QR code. The verify page shows only the type, the date and whether it is valid.

We will never

• Ask for your password, PIN or two-step code by phone, email or text
• Send you a link that signs you straight into your account

What you can do

• Use a password you use nowhere else, and turn on two-step sign-in
• Check the website address before you type your password
• Sign out when you use a shared device