Security: Biometrics, PIN Codes, and Recovery Phrases
Three layers of protection, what each one actually defends against, and how to set them up properly.
OpenPay Pro Team · May 30, 2026 · 5 min read
Security features are only useful if you understand what they protect. These three cover different threats, which is why the wallet offers all of them.
Biometric login
Built on WebAuthn, biometric login binds a credential to your device. It defends against someone who has your password but not your phone, and it removes the habit of typing credentials into whatever browser you happen to be in.
PIN code
The PIN protects sensitive actions on an already-unlocked device. It is stored only as a hash — the wallet never keeps the digits themselves and cannot recover them for you.
Recovery phrase
A twelve-word phrase is your last line of defence. Write it down offline, never paste it into a chat or a form, and treat anyone asking for it as an attacker.
Support will never ask for your recovery phrase, your PIN, or a code sent to your device.