> ## Documentation Index
> Fetch the complete documentation index at: https://docs.polywin.bot/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> How PolyWin protects your wallets.

PolyWin is built on a few simple safety principles. Your funds, your keys, your control.

## Non-custodial by design

PolyWin never holds your funds. Every wallet you create is yours from the first second — exportable, transferable, fully under your control.

## Per-wallet encryption

Every wallet is encrypted with its own unique key. No master key, no shared secret — a leak of one wallet would never compromise another.

## Two-factor authentication

Enable TOTP-based 2FA from the Settings hub. Any authenticator app works — Google Authenticator, Authy, 1Password, Raycast.

Once enabled, 2FA is required for:

* Exporting a private key
* Withdrawing funds
* Changing critical settings

<Steps>
  <Step title="Open Settings → Security">
    Tap **⚙️ Settings** → **Security**.
  </Step>

  <Step title="Tap Enable 2FA">
    PolyWin shows a QR code. Scan it with your authenticator app.
  </Step>

  <Step title="Confirm with a code">
    Enter the current 6-digit code from your app to activate.
  </Step>
</Steps>

<Warning>
  Keep your authenticator app backed up. If you lose your device without a backup, contact support to reset 2FA from a verified account. We strongly recommend exporting your private keys before enabling 2FA so you always have a recovery path.
</Warning>

<Card title="Export your keys" icon="key" href="/wallet/export">
  Pull your private keys out anytime.
</Card>