Money only moves when you approve it.
Here's what stands between your balance and anyone else, and what you need to keep safe yourself.
Signing in
- A strong passwordAt least 12 characters. A few unrelated words work well.
- Verified emailYou confirm your email address before any money can move.
- Sign-in alertsEvery new sign-in sends a notice to your wallet. You can sign out every other session from Security.
Approving money
- Transaction PINYour 4-digit PIN approves sends, bank transfers, conversions and Save & lock. Easy PINs like 1234 or 1111 aren't allowed.
- Five triesFive wrong PINs in a row block the PIN, and you're notified. Resetting it needs your password.
- 24-hour cooling-offRecovering your password or resetting your PIN pauses withdrawals for 24 hours.
- Daily limitsEvery asset has a daily limit on money leaving your wallet. See them on the fees page and under Security in the app.
Your crypto keys
Peppy holds the keys to your Tron and Ethereum addresses. They live in a separate signing service, apart from the website, and it signs only transfers you've approved. It has its own per-transfer and daily caps, so a problem elsewhere can't move unlimited funds.
Every transfer is recorded in a ledger and checked against the blockchain. A transfer whose outcome isn't clear stays reserved until it's settled, instead of being shown as done or sent twice.
On iPhone
When the iPhone app arrives, you'll be able to lock it with Face ID, Touch ID or your passcode, and your balances are hidden in the app switcher. Unlocking the app never replaces your PIN when you approve money.
What you should know
- Peppy will never ask for your password, PIN or private keys.Not by email, phone or chat. Anyone who does isn't Peppy.
- Blockchain transfers can't be reversed.Check the address and network before every send.
- Stablecoins carry their own risks.A stablecoin can lose its dollar value, and its issuer can restrict tokens.
- Peppy is not a bank.Balances in Peppy aren't bank deposits.