Security

Your keys stay yours

Social Card is built so you can spend without parking funds at a custodian. Approvals happen in the wallet you already trust.

Passkeys

Sign in with Face ID, Touch ID, or a device passkey. No extra seed phrase to memorize for daily use.

Smart accounts

Spending limits and recovery live on the account, not in a black-box bank ledger.

Self-custody

We request your Solana public key to issue a card. Private keys never leave Phantom, Trust, or MetaMask.

What we can see

The public key you connect, the email you verify, and spending on the card. We do not store seed phrases.

  • Wallet public key only
  • Verify email, never passwords for the chain
  • Freeze a card if a device is lost

What you control

You approve connections and later spend from the wallet. Unused balance can be withdrawn instead of sitting with a custodian.

  • You approve each connection
  • Per-card spend caps
  • Withdraw unused funds
Account protection

What protects the account

Account security

Password login, email and SMS codes, session history you can revoke, and optional IP allow-lists.

MFA

Authenticator (TOTP) can be turned on in Settings. An account can require it. Backup codes are stored hashed.

Passkeys

Sensitive dashboard actions can require a passkey step-up when that flow is enabled on the device.

Session protection

Sessions expire, idle out, and can be revoked from Settings or by staff. A freeze also clears sessions.

Card security

Freeze, country allow-lists, category blocks, and spend caps are the card controls in the product.

Alerts

Login, transaction, and card alert emails follow the toggles on your account.

Secure first, then spend

Register when you are ready. Support is in Houston if you need a human.

Get Social Card