> ## Documentation Index
> Fetch the complete documentation index at: https://help.chainbook.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> Secure your Chainbook account with passwords and passkeys

Chainbook provides multiple security options to protect your account and data.

## Authentication Options

<CardGroup cols={2}>
  <Card title="Password" icon="key">
    Traditional email and password authentication.
  </Card>

  <Card title="Passkeys" icon="fingerprint">
    Modern passwordless authentication using biometrics or security keys.
  </Card>
</CardGroup>

## Password Security

### Password Requirements

Passwords must be at least 8 characters long.

<Tip>
  Use a password manager to generate and store strong, unique passwords.
</Tip>

### Changing Your Password

<Steps>
  <Step title="Go to Settings">
    Navigate to **Settings** → **Account**.
  </Step>

  <Step title="Find the Password section">
    Locate the password change form.
  </Step>

  <Step title="Enter current password">
    Verify your identity by entering your current password.
  </Step>

  <Step title="Enter new password">
    Type your new password twice to confirm.
  </Step>

  <Step title="Save changes">
    Submit the form.

    <Check>
      Your password is updated. Use it on your next sign-in.
    </Check>
  </Step>
</Steps>

### Forgot Your Password?

If you can't sign in because you forgot your password, contact support at **[support@chainbook.app](mailto:support@chainbook.app)** and we'll help you regain access.

<Tip>
  If you have a passkey registered, you can still sign in with it from the
  sign-in page and then change your password from **Settings** → **Account**.
</Tip>

## Email Verification

When you sign up, Chainbook sends a verification email to your address:

1. Open the email and click the verification link
2. Until you verify, a banner is shown in the app
3. Creating wallets is blocked until your email is verified

<Note>
  Didn't receive the email? Check your spam folder, or contact
  **[support@chainbook.app](mailto:support@chainbook.app)**.
</Note>

## Passkeys

Passkeys offer passwordless authentication using:

* Face ID or Touch ID on Apple devices
* Windows Hello on Windows devices
* Fingerprint sensors on Android devices
* Hardware security keys (YubiKey, etc.)

### Benefits of Passkeys

<CardGroup cols={2}>
  <Card title="Phishing Resistant" icon="shield">
    Passkeys can't be phished or stolen like passwords.
  </Card>

  <Card title="Convenient" icon="bolt">
    Sign in with a quick biometric scan.
  </Card>

  <Card title="Cross-Device" icon="sync">
    Passkeys sync securely across your devices.
  </Card>

  <Card title="No Password to Remember" icon="brain">
    Eliminate the need for password memorization.
  </Card>
</CardGroup>

### Adding a Passkey

Passkeys are set up after you've created your account.

<Steps>
  <Step title="Go to Settings">
    Navigate to **Settings** → **Account** and find the **Passkeys** section.
  </Step>

  <Step title="Click Add Passkey">
    Click the **Add Passkey** button.
  </Step>

  <Step title="Authenticate">
    Your device prompts you to authenticate:

    * Use Face ID, Touch ID, or fingerprint
    * Use Windows Hello
    * Insert your security key

    <Check>
      Your passkey is registered and ready to use.
    </Check>
  </Step>
</Steps>

### Using Passkeys to Sign In

1. Go to the sign-in page
2. Choose the passkey sign-in option
3. Authenticate with your biometric or security key
4. You're signed in immediately

### Managing Passkeys

View and manage your passkeys in **Settings** → **Account**. The list shows each registered passkey's device type and whether it's backed up (synced through your platform account).

### Removing a Passkey

1. Go to **Settings** → **Account**
2. Find the passkey you want to remove
3. Click **Remove**
4. Confirm the removal

## Account Recovery

If you lose access to all your devices and can't sign in:

1. Try signing in on a device where your passkey synced (via iCloud, Google, or Microsoft)
2. Sign in with your password if you have one
3. Contact **[support@chainbook.app](mailto:support@chainbook.app)** for help

<Tip>
  Keep both a password and a passkey registered for maximum flexibility.
</Tip>

## Security Best Practices

<AccordionGroup>
  <Accordion title="Use a password manager">
    Password managers like 1Password, Bitwarden, or Apple Keychain:

    * Generate strong, unique passwords
    * Securely store your credentials
    * Auto-fill login forms
    * Sync across devices
  </Accordion>

  <Accordion title="Enable passkeys when possible">
    Passkeys are more secure than passwords because:

    * They can't be guessed or cracked
    * They're resistant to phishing
    * They don't work on fake websites
  </Accordion>

  <Accordion title="Keep your email secure">
    Your email is your account identity:

    * Use a strong, unique email password
    * Enable two-factor authentication on your email
    * Don't share email access with others
  </Accordion>

  <Accordion title="Be careful with shared computers">
    On shared or public computers:

    * Always sign out when done
    * Don't save passwords in the browser
    * Use private/incognito browsing
    * Consider using passkeys instead of typing passwords
  </Accordion>
</AccordionGroup>

## Data Security

* **In transit**: All traffic to Chainbook is served over HTTPS
* **Passwords**: Hashed with bcrypt — never stored in plain text
* **Access control**: Only you and members you invite can see your wallet data
* **Private keys**: Chainbook never asks for or stores private keys — we only track public wallet addresses using publicly available blockchain data

## Reporting Security Issues

If you discover a security vulnerability:

1. Email **[support@chainbook.app](mailto:support@chainbook.app)**
2. Describe the issue in detail
3. Include steps to reproduce if possible

<Note>
  We appreciate responsible disclosure.
</Note>

## Frequently Asked Questions

<AccordionGroup>
  <Accordion title="Is two-factor authentication (2FA) available?">
    Passkeys provide strong authentication similar to 2FA. Traditional
    TOTP-based 2FA is on our roadmap.
  </Accordion>

  <Accordion title="Can I use both password and passkeys?">
    Yes, you can have both enabled. Use whichever is convenient when signing in.
  </Accordion>

  <Accordion title="What if I lose my phone with my passkey?">
    If your passkeys sync via iCloud, Google, or Microsoft, access them from
    another device. Otherwise, sign in with your password — or contact
    [support@chainbook.app](mailto:support@chainbook.app) if you're locked out.
  </Accordion>

  <Accordion title="Are my wallet private keys safe?">
    Chainbook never asks for or stores private keys. We only track public
    wallet addresses using publicly available blockchain data.
  </Accordion>
</AccordionGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.