Security

How ftw.trade keeps your keys, signs your trades and protects your account, and what you can do to keep it safe.

Keys#

• An isolated signer. Wallet keys are made, sealed and used by a separate signing service. The app asks it to sign a transaction; it never hands a key out, and its master secret is wrapped by a key only that service can unwrap.
• Sealed per account and address. Each key is sealed to its account and its address, and checked against its address every time it's opened.
• Judged before signing. The signer checks what it's asked to sign. A vault's wallets, for example, sign only actions inside the vault's scope, and only typed actions they can read, never a blind digest.
• Never shown to code. No strategy, workflow, script or AI ever sees a key. Scripts trade through wallet handles held to the policy you approved.

Your account#

• Many ways in. Wallet, passkey, Google, X or email. Add more than one under Account settings → Ways to sign in so you're never locked out.
• Fresh sign-in for big steps. Exporting a key, withdrawing to an outside address and turning withdrawals on ask you to have signed in within the last 15 minutes.
• Devices and activity. Account → Security lists every signed-in device, signs out one or all others (revoking every API key too), and shows recent security events.

AI agents#

• Live trading is off per connection until you allow it.
• Keys can be narrowed to read, paper or live, to projects and tools, with an expiry and daily spend caps, and revoked in one click. See API keys.
• Spending your main wallet needs a signature from your sign-in wallet. A token alone can never spend it.

Running money safely#

• Exactly once. Each effect a run makes (a buy, a bridge, an outside call) is journaled per delivery, so a retried run never repeats one.
• Divergence guard. A live run stops itself if its replay stops matching what it already sent.
• Stale-data hold. A run waits rather than trading on old prices.
• Risk limits in the strategy and on the run, scope on vaults, and policy on scripts are enforced where wallets sign, not just where orders are planned.

Report a security issue#

Email security@ftw.trade with what you found and how to reproduce it. Please don't test against other people's accounts or money, and give us a chance to fix it before you tell anyone else. We answer every report.