# Security

> How ftw.trade keeps your keys, signs your trades and protects your account, and what you can do to keep it safe.

## Keys

- **An isolated signer.** Wallet keys are made, sealed and used by a separate signing service. The app asks it to sign a transaction; it never hands a key out, and its master secret is wrapped by a key only that service can unwrap.
- **Sealed per account and address.** Each key is sealed to its account and its address, and checked against its address every time it's opened.
- **Judged before signing.** The signer checks what it's asked to sign. A vault's wallets, for example, sign only actions inside the vault's scope, and only typed actions they can read, never a blind digest.
- **Never shown to code.** No strategy, workflow, script or AI ever sees a key. Scripts trade through wallet handles held to the policy you approved.

## Your account

- **Many ways in.** Wallet, passkey, Google, X or email. Add more than one under Account settings → Ways to sign in so you're never locked out.
- **Fresh sign-in for big steps.** Exporting a key, withdrawing to an outside address and turning withdrawals on ask you to have signed in within the last 15 minutes.
- **Devices and activity.** Account → Security lists every signed-in device, signs out one or all others (revoking every API key too), and shows recent security events.

## AI agents

- **Live trading is off per connection** until you allow it.
- **Keys can be narrowed** to read, paper or live, to projects and tools, with an expiry and daily spend caps, and revoked in one click. See [API keys](https://docs.ftw.trade/agents/keys).
- **Spending your main wallet needs a signature** from your sign-in wallet. A token alone can never spend it.

## Running money safely

- **Exactly once.** Each effect a run makes (a buy, a bridge, an outside call) is journaled per delivery, so a retried run never repeats one.
- **Divergence guard.** A live run stops itself if its replay stops matching what it already sent.
- **Stale-data hold.** A run waits rather than trading on old prices.
- **Risk limits** in the strategy and on the run, **scope** on vaults, and **policy** on scripts are enforced where wallets sign, not just where orders are planned.

## Report a security issue

Email **security@ftw.trade** with what you found and how to reproduce it. Please don't test against other people's accounts or money, and give us a chance to fix it before you tell anyone else. We answer every report.