Back

Security

Other Security Questions

Back

Security

Other Security Questions

Back

Security

Other Security Questions

Back

Security

Other Security Questions

What if the Fuse app gets removed from the App Store?

An App Store ban is an extremely unlikely scenario. However, to ensure continuous Fuse access regardless of Apple's actions, upgrade your 2FA Key from iCloud to a Ledger and use a wallet (e.g. Phantom) as one of your Recovery Keys. With an external 2FA Key and wallet Recovery Key, you can always access your Fuse wallet via the Squads UI.

How does Fuse's security compare to Saga's mobile seed vault?

When comparing key management solutions it's important to look at two aspects: security and recoverability. In terms of security, the Seed Vault is only as secure as your approach to backing up the corresponding seed phrase. If you write it down on a piece of paper and put it on your bed table no secure element will help you. If you decide not to back it up at all, then the key is perfectly safe but your funds are lost if you lose your device.

With Fuse, every one of the keys controlling the wallet is independently disposable thanks to the recovery feature where other keys can be used to replace the compromised or lost key. This fact also helps with security: you don't need to back the keys up manually, you never write down any seed phrases, thus making it way harder for a key to become compromised in the first place. In general, our approach to security and recoverability is based on an assumption that any one of the keys can always be lost or compromised but this never leads to a loss of funds. And it is exponentially less likely for multiple keys to be lost/compromised at the same time.  This makes Fuse one of the most secure and recoverable offerings in the self-custody wallet space.

What if I accidentally delete my wallet?

Permanently deleting a Fuse wallet is a multi-step process to prevent accidental deletion. To delete your Fuse wallet the following steps must happen: 

  1. The process begins with a biometric check, ensuring only you can start the deletion process.

  2. We provide a detailed explanation of what deleting your wallet entails.

  3. We check your wallet balance and warn you if you have any funds, advising you to move them out first.

  4. We also check your Paymaster balance and offer to move those funds out.

  5. You must tick several checkboxes confirming that you understand the consequences of your actions.

  6. A last confirmation step is required to complete the deletion.

Deleting your wallet permanently removes it from your device. Once deleted, you cannot recover, access, or perform any other action with that wallet in Fuse and any stored assets are also lost.

What information does Fuse collect about me?

We only store the information about the keys associated with your wallet, including the device name and email addresses for Recovery Keys (if you have set them up)

If you're concerned about sharing your email address, you can use the native iOS "Hide my email" feature to ensure your real email is not stored with us.

Is the recovery email authentication process secure against potential exploits?

If someone intercepts your recovery email and sees the authentication code, it's not enough for them to use the recovery key. The mechanism for accessing the key involves a second secret generated on your device right before login. The code you receive in the email needs to be combined with your local secret to get authenticated.

The public part of that secret is sent to our backend, and we issue an authentication request (ask Turnkey to send you an email) on your behalf. If your request is not signed by one of your Active Keys, we will not issue that authentication request. This ensures that nobody can authenticate with Turnkey by just intercepting the recovery email.

Here are more details about email recovery with Turnkey.

Why can’t I withdraw all the SOL from my Fuse wallet?

Your smart wallet needs to maintain a minimum SOL balance of 0.025 SOL for future transactions. (This amount is not spent, and network fees are on par with hot wallets)

You can recover this amount if you delete your Fuse wallet. However, that means you won't be able to use your wallet anymore and will have to create a new one if you wish to use Fuse again.

What if the Fuse app gets removed from the App Store?

An App Store ban is an extremely unlikely scenario. However, to ensure continuous Fuse access regardless of Apple's actions, upgrade your 2FA Key from iCloud to a Ledger and use a wallet (e.g. Phantom) as one of your Recovery Keys. With an external 2FA Key and wallet Recovery Key, you can always access your Fuse wallet via the Squads UI.

How does Fuse's security compare to Saga's mobile seed vault?

When comparing key management solutions it's important to look at two aspects: security and recoverability. In terms of security, the Seed Vault is only as secure as your approach to backing up the corresponding seed phrase. If you write it down on a piece of paper and put it on your bed table no secure element will help you. If you decide not to back it up at all, then the key is perfectly safe but your funds are lost if you lose your device.

With Fuse, every one of the keys controlling the wallet is independently disposable thanks to the recovery feature where other keys can be used to replace the compromised or lost key. This fact also helps with security: you don't need to back the keys up manually, you never write down any seed phrases, thus making it way harder for a key to become compromised in the first place. In general, our approach to security and recoverability is based on an assumption that any one of the keys can always be lost or compromised but this never leads to a loss of funds. And it is exponentially less likely for multiple keys to be lost/compromised at the same time.  This makes Fuse one of the most secure and recoverable offerings in the self-custody wallet space.

What if I accidentally delete my wallet?

Permanently deleting a Fuse wallet is a multi-step process to prevent accidental deletion. To delete your Fuse wallet the following steps must happen: 

  1. The process begins with a biometric check, ensuring only you can start the deletion process.

  2. We provide a detailed explanation of what deleting your wallet entails.

  3. We check your wallet balance and warn you if you have any funds, advising you to move them out first.

  4. We also check your Paymaster balance and offer to move those funds out.

  5. You must tick several checkboxes confirming that you understand the consequences of your actions.

  6. A last confirmation step is required to complete the deletion.

Deleting your wallet permanently removes it from your device. Once deleted, you cannot recover, access, or perform any other action with that wallet in Fuse and any stored assets are also lost.

What information does Fuse collect about me?

We only store the information about the keys associated with your wallet, including the device name and email addresses for Recovery Keys (if you have set them up)

If you're concerned about sharing your email address, you can use the native iOS "Hide my email" feature to ensure your real email is not stored with us.

Is the recovery email authentication process secure against potential exploits?

If someone intercepts your recovery email and sees the authentication code, it's not enough for them to use the recovery key. The mechanism for accessing the key involves a second secret generated on your device right before login. The code you receive in the email needs to be combined with your local secret to get authenticated.

The public part of that secret is sent to our backend, and we issue an authentication request (ask Turnkey to send you an email) on your behalf. If your request is not signed by one of your Active Keys, we will not issue that authentication request. This ensures that nobody can authenticate with Turnkey by just intercepting the recovery email.

Here are more details about email recovery with Turnkey.

Why can’t I withdraw all the SOL from my Fuse wallet?

Your smart wallet needs to maintain a minimum SOL balance of 0.025 SOL for future transactions. (This amount is not spent, and network fees are on par with hot wallets)

You can recover this amount if you delete your Fuse wallet. However, that means you won't be able to use your wallet anymore and will have to create a new one if you wish to use Fuse again.

What if the Fuse app gets removed from the App Store?

An App Store ban is an extremely unlikely scenario. However, to ensure continuous Fuse access regardless of Apple's actions, upgrade your 2FA Key from iCloud to a Ledger and use a wallet (e.g. Phantom) as one of your Recovery Keys. With an external 2FA Key and wallet Recovery Key, you can always access your Fuse wallet via the Squads UI.

How does Fuse's security compare to Saga's mobile seed vault?

When comparing key management solutions it's important to look at two aspects: security and recoverability. In terms of security, the Seed Vault is only as secure as your approach to backing up the corresponding seed phrase. If you write it down on a piece of paper and put it on your bed table no secure element will help you. If you decide not to back it up at all, then the key is perfectly safe but your funds are lost if you lose your device.

With Fuse, every one of the keys controlling the wallet is independently disposable thanks to the recovery feature where other keys can be used to replace the compromised or lost key. This fact also helps with security: you don't need to back the keys up manually, you never write down any seed phrases, thus making it way harder for a key to become compromised in the first place. In general, our approach to security and recoverability is based on an assumption that any one of the keys can always be lost or compromised but this never leads to a loss of funds. And it is exponentially less likely for multiple keys to be lost/compromised at the same time.  This makes Fuse one of the most secure and recoverable offerings in the self-custody wallet space.

What if I accidentally delete my wallet?

Permanently deleting a Fuse wallet is a multi-step process to prevent accidental deletion. To delete your Fuse wallet the following steps must happen: 

  1. The process begins with a biometric check, ensuring only you can start the deletion process.

  2. We provide a detailed explanation of what deleting your wallet entails.

  3. We check your wallet balance and warn you if you have any funds, advising you to move them out first.

  4. We also check your Paymaster balance and offer to move those funds out.

  5. You must tick several checkboxes confirming that you understand the consequences of your actions.

  6. A last confirmation step is required to complete the deletion.

Deleting your wallet permanently removes it from your device. Once deleted, you cannot recover, access, or perform any other action with that wallet in Fuse and any stored assets are also lost.

What information does Fuse collect about me?

We only store the information about the keys associated with your wallet, including the device name and email addresses for Recovery Keys (if you have set them up)

If you're concerned about sharing your email address, you can use the native iOS "Hide my email" feature to ensure your real email is not stored with us.

Is the recovery email authentication process secure against potential exploits?

If someone intercepts your recovery email and sees the authentication code, it's not enough for them to use the recovery key. The mechanism for accessing the key involves a second secret generated on your device right before login. The code you receive in the email needs to be combined with your local secret to get authenticated.

The public part of that secret is sent to our backend, and we issue an authentication request (ask Turnkey to send you an email) on your behalf. If your request is not signed by one of your Active Keys, we will not issue that authentication request. This ensures that nobody can authenticate with Turnkey by just intercepting the recovery email.

Here are more details about email recovery with Turnkey.

Why can’t I withdraw all the SOL from my Fuse wallet?

Your smart wallet needs to maintain a minimum SOL balance of 0.025 SOL for future transactions. (This amount is not spent, and network fees are on par with hot wallets)

You can recover this amount if you delete your Fuse wallet. However, that means you won't be able to use your wallet anymore and will have to create a new one if you wish to use Fuse again.

What if the Fuse app gets removed from the App Store?

An App Store ban is an extremely unlikely scenario. However, to ensure continuous Fuse access regardless of Apple's actions, upgrade your 2FA Key from iCloud to a Ledger and use a wallet (e.g. Phantom) as one of your Recovery Keys. With an external 2FA Key and wallet Recovery Key, you can always access your Fuse wallet via the Squads UI.

How does Fuse's security compare to Saga's mobile seed vault?

When comparing key management solutions it's important to look at two aspects: security and recoverability. In terms of security, the Seed Vault is only as secure as your approach to backing up the corresponding seed phrase. If you write it down on a piece of paper and put it on your bed table no secure element will help you. If you decide not to back it up at all, then the key is perfectly safe but your funds are lost if you lose your device.

With Fuse, every one of the keys controlling the wallet is independently disposable thanks to the recovery feature where other keys can be used to replace the compromised or lost key. This fact also helps with security: you don't need to back the keys up manually, you never write down any seed phrases, thus making it way harder for a key to become compromised in the first place. In general, our approach to security and recoverability is based on an assumption that any one of the keys can always be lost or compromised but this never leads to a loss of funds. And it is exponentially less likely for multiple keys to be lost/compromised at the same time.  This makes Fuse one of the most secure and recoverable offerings in the self-custody wallet space.

What if I accidentally delete my wallet?

Permanently deleting a Fuse wallet is a multi-step process to prevent accidental deletion. To delete your Fuse wallet the following steps must happen: 

  1. The process begins with a biometric check, ensuring only you can start the deletion process.

  2. We provide a detailed explanation of what deleting your wallet entails.

  3. We check your wallet balance and warn you if you have any funds, advising you to move them out first.

  4. We also check your Paymaster balance and offer to move those funds out.

  5. You must tick several checkboxes confirming that you understand the consequences of your actions.

  6. A last confirmation step is required to complete the deletion.

Deleting your wallet permanently removes it from your device. Once deleted, you cannot recover, access, or perform any other action with that wallet in Fuse and any stored assets are also lost.

What information does Fuse collect about me?

We only store the information about the keys associated with your wallet, including the device name and email addresses for Recovery Keys (if you have set them up)

If you're concerned about sharing your email address, you can use the native iOS "Hide my email" feature to ensure your real email is not stored with us.

Is the recovery email authentication process secure against potential exploits?

If someone intercepts your recovery email and sees the authentication code, it's not enough for them to use the recovery key. The mechanism for accessing the key involves a second secret generated on your device right before login. The code you receive in the email needs to be combined with your local secret to get authenticated.

The public part of that secret is sent to our backend, and we issue an authentication request (ask Turnkey to send you an email) on your behalf. If your request is not signed by one of your Active Keys, we will not issue that authentication request. This ensures that nobody can authenticate with Turnkey by just intercepting the recovery email.

Here are more details about email recovery with Turnkey.

Why can’t I withdraw all the SOL from my Fuse wallet?

Your smart wallet needs to maintain a minimum SOL balance of 0.025 SOL for future transactions. (This amount is not spent, and network fees are on par with hot wallets)

You can recover this amount if you delete your Fuse wallet. However, that means you won't be able to use your wallet anymore and will have to create a new one if you wish to use Fuse again.