Security

You own your keys and you decide what automation may do. Here is how that works.

You own your keys

Verve wallets are non-custodial. Each wallet lives in your own secure space on Turnkey infrastructure, where you are the only owner, confirmed with an email code or a passkey. Verve holds a limited signing permission that you can revoke, and uses it only to run the trades, sends and withdrawals you ask for, plus anything you grant to Copilot, orders or a connected AI. Verve cannot export your keys and its servers never see them. See Non-custodial wallets.

What you control

Permissions you can grant and revoke.
PermissionWhere you change it
Verve trading access (the signing permission)Account & Security > Wallets. Revoking it stops trading through Verve until you grant it again.
Copilot authority, per chainThe badge in the Copilot header. See Copilot.
Connected AI apps, per chainSettings > Connect your AI. See Connect your AI.
Orders and copy subscriptionsThe Orders tab on a token page, and the Copy Trade page.
Developer API keysThe Developer Dashboard.

Security Check

Exporting a private key is the one action that asks you to prove it is you again, with an email code or a passkey. A passkey lets you confirm with your device instead of waiting for a code; add one in Account & Security. Verve does not ask for a password on transfers.

Checks on every money action

  • You must have accepted the current Terms and Privacy Policy.
  • Your account must be approved for funds, and Verve can pause all funds activity at once.
  • Every money request carries an idempotency key, so a retry is never executed twice.
  • Treasury addresses are held on the server and are never supplied by a browser, a script or an AI.

What Verve will never do

  • Ask you for a private key, seed phrase or password in a message, a call or a support chat.
  • Send you a message first asking you to connect a wallet or approve something.
  • Accept a recovery phrase. Account recovery is an emailed link only.

What you should do

  • Secure the email account you use for Verve. It is how you recover and how you confirm exports.
  • Add a passkey.
  • Review connected AI apps and revoke what you no longer use.
  • Export and store your keys offline if you want an independent backup. See Export your keys.

Leaving Verve

Account & Security lets you delete your account after re-entering your password. Deletion is blocked while a cross-chain cash order or a reward payout is in progress, or while wallets that Verve manages still hold funds: move your funds out first, or contact support with a support code. See Support.