Understand how Privy works and learn best practices for securing your account.
What is Privy?
Privy helps developers onboard any user to web3 apps securely.
We build the software that powers the user onboarding and wallet infrastructure for popular crypto applications. Privy helps developers unlock the benefits of building with decentralized systems to enable new product experiences for their users.
How Privy works.
Privy lets developers easily provision user accounts for all users, whether they know about crypto or not. This means letting users connect with their existing wallet (MetaMask, Coinbase Wallet, etc.) if they already have one, and provisioning an embedded wallet for those who do not.
Wallets allow users to receive assets, sign messages, and transact on the blockchain. Embedded wallets let users do this without any of the traditional complexity associated with securing your own cryptographic keys.
How Privy secures your account.
Proactive security
We use resource isolation and cryptographic architecture designed to prevent Privy or our its developers from ever touching your keys. Learn more
Active monitoring
Privy systems are instrumented for active monitoring. This means automated alerts triggered by unexpected or abnormal activity and 24/7 on-call security.
Battle-tested infrastructure
Privy uses a multi-layered security approach, with extensive audits and robust infrastructure failsafes, to protect your account.
Progressive defenses
Privy systems are securely architected from the ground up. We work to secure your assets and data.
Additional steps to secure your account.
Enable MFA
As your account grows in value, add multi-factor authentication (MFA) with passkeys, authenticator codes, and more.
Add another login method
Add an additional authentication method in case you are locked out of your account.
Back up to cloud
Back up your account to Google Drive or Apple iCloud to recover it on new devices.
An app can prompt you "Enable delegated actions." By enabling delegated actions, you are giving permission for the app to perform onchain actions on your behalf using your app's wallet.
The prompt screen will include the exact permissions you are enabling, like a maximum amount the app can transact on your behalf. All delegated actions expire after a period of time, often 30 days. You can revoke delegation at anytime.
If you’re having trouble accessing your account, here are a few recommendations:
Make sure you’re signing in with the same credentials you initially used to create the account. Often, you may be trying to sign in with new credentials (for example a phone number rather than an email), leading to a new account being created for you.
Verify you are getting the appropriate verification texts or emails to log in. If you are not, please reach out to [email protected].
In general, we recommend linking multiple authentication methods to your account, when possible, to help you in case you lose credentials.
Unfortunately, if you have forgotten your credentials, there’s typically nothing Privy can do to help. For security reasons, Privy can never grant access to a user account without verifying the correct login credentials.
Additionally, if you lose the recovery password you set to secure your embedded wallet, there’s nothing Privy can do to help you access the wallet. See above best practices for securing your account.
Contact us.
For account security questions or if you’re not receiving the appropriate verifications texts or emails to log in, please reach out to us at [email protected].