Skip to content

Your money's security

We take the security of your money seriously. Here, in plain language, is what protects your account — and what you can do to strengthen it.

  • 2FA required for the wallet. You can’t create a wallet or withdraw without 2-step verification turned on.
  • 2FA on every withdrawal. Every withdrawal asks for a fresh code from your authenticator app — your password alone isn’t enough.
  • Withdrawals locked to your document. PIX only goes to a key that is your own registered CPF/CNPJ. No one can redirect your payouts.
  • Re-authentication to disable 2FA. Requires a password + a valid code, so a hijacked session can’t remove your protection.
  • Security alerts. We notify you by email (and WhatsApp) for sensitive actions: withdrawals, password changes, email changes, and disabling 2FA. For an email change, the old address is also notified.
  • Leaked passwords blocked. At sign-up and on password changes, we reject passwords that have already appeared in known breaches.
  • Anti-bot protection at login. Reduces automated break-in attempts.
  1. Turn on 2FA as soon as possible (how to do it).
  2. Use a strong, unique password (preferably a password manager).
  3. Never share your password or your authenticator app codes.
  4. Register the correct CPF/CNPJ on your wallet.