Security and recovery

Soca’s security model is simple to state: your money lives in a wallet only you control, and only you can approve what happens to it. This page covers how that works day to day, and what happens on a bad day, like a lost phone.

Passkeys protect sensitive actions

A passkey is Face ID, Touch ID, or your device’s screen lock, used as an approval. Once you set one up (Account → Security), sensitive actions ask for it: approving payments, and revealing or exporting your wallet key. There is no password to remember, nothing to type, and nothing a scammer can phish out of you. A passkey only works on your device, with you present.

Your keys, your money

Soca is non-custodial: money settles to wallets you hold the keys for, and any wallet key can be exported at any time. In practice, open Account → Security → Export your private key, confirm with your passkey, and move your wallet into Phantom or any other wallet app at any time, with no permission or waiting period. Soca can never hold your money hostage, because you can always take the keys and walk.

You will only ever need this if you *want* it. Most people never export a key; the point is that you always can.

If you lose your device

1. 1

   Get a new device

   Nothing about your money was stored only on the old phone, so nothing about your money is lost with it.

2. 2

   Sign back in

   Use the same Google, Apple, or email sign-in you created the account with. Your wallet is recovered through your login, which is why there was never a seed phrase to write down.

3. 3

   Re-confirm it is you

   Your passkey and recovery method verify you on the new device. Setting up account recovery ahead of time (Account → Security) makes this step painless. Do it on a calm day, not a bad one.

If you signed up by connecting your own wallet (Phantom, Solflare, Backpack), recovery works the way your wallet app handles it; Soca never held your keys in the first place.

What Soca can never do

• Move your money. Every payment is approved by you. There is no Soca button that spends your balance.
• Freeze your money. Your balance is in your wallet, not a Soca account. There is nothing on Soca’s side to freeze.
• Lock you in. Your key exports whenever you want. Leaving Soca is always one passkey away.
• Charge you beyond what you approved. A subscription can never take more than its stated cap per period, and you can revoke it instantly.

Payment privacy

You can turn on privacy for a payment: instead of a direct transfer, Soca routes that USDC through a privacy partner so the payment isn’t linkable to the rest of your on-chain history. It’s opt-in and off by default. You choose it per action, and never have to configure anything technical. Today it covers private payments, private receive links, and private payouts. See Private payments for exactly what it hides, what it does not, the cost and timing, and how each one works.