Security & Privacy

How to secure your account with passkeys and Face ID

Secure Vaultr with WebAuthn/FIDO2 passkeys and on-device face authentication that stores only a SHA-256 hash, plus OTP, a PIN, and JWT sessions.

Last updated June 6, 2026

Quick answer: Vaultr secures your account with WebAuthn / FIDO2 passkeys, on-device face authentication (only a SHA-256 hash is stored — never your image), OTP codes via email and SMS, and a 6-digit PIN for hidden profiles. Sessions are JWT-based with per-device tracking and instant revocation, and every security event is written to an immutable audit trail.

Didn’t find what you needed?

Back to the Knowledge Base

Related reading

Decoy, duress, and destruct slots explainedVaultr's coercion-resistant slot types let you protect your real data even when someone forces you to unlock.How to Set Up a Decoy Profile in VaultrCreate a decoy vault slot in Vaultr that shows a believable fake wallet under coercion while your real profile stays hidden. Step-by-step guide.How to configure a duress profile that silently alerts your guardiansConfigure a Vaultr duress profile that opens normally but silently alerts your guardians under coercion. No banner, no sound, undetectable.

Every other app asks you to trust it.
Vaultr trusts you.

Your vault. Your keys. Your messages. Your money. Your identity. Your rules. Get it on every platform — and if they’ve blocked the stores where you live, install the PWA and walk right in.

iOSApp StoreAndroidGoogle PlayInstall PWABlocked in your country? Install it anyway.Open on WebUse it in any browser