Security

Your wallets' private keys are held by Privy, our wallet provider, in a secure enclave. Trenchers never has them.

Your keys

• Privy holds the keys for your main, extra and imported wallets, and each live bot trades from its own Privy wallet. Trenchers staff cannot see or export the keys.
• To trade without a pop-up on every order, Trenchers signs only within the permissions you grant through Privy. It never sees the key itself.
• You can export your main wallet's key at any time: open the account menu, pick Manage Wallets, then Export private key. The key shows in a secure Privy window.

Store an exported key offline or in a password manager. Anyone who has it controls that wallet.

Protect your login

Whoever controls the email, Google account, X account or wallet you log in with can open your Trenchers account. Give it a strong password and turn on that service's own two-factor authentication.

Trenchers has no two-factor authentication of its own yet, and no way to sign out other devices. Log out when you use a shared computer.

Connected apps

An AI app you connect through the Agent API can act on your account, including your live bots. Review and revoke connections in Settings → Connected apps, or under Your connections on the Agent API page. A revoked app is cut off within 15 seconds. Treat API keys like passwords, and revoke any that leak.