VAULTFI BROWSER STEP-BY-STEP GUIDE
Security
Protect your VaultFi account with passkeys, authenticator 2FA, recovery controls, session review, login history and secure wallet export.
Step-by-step
- Open Security or type `security`.
- Review Authentication & recovery first. The Browser's live Security module includes Passkeys, Authenticator-app 2FA, Recovery, and Wallet ownership & portability.
- Passkeys: use the available Passkey control to enroll or review a passkey. Follow the device/browser prompt and verify that the passkey appears as active before relying on it.
- Authenticator-app 2FA: open the authenticator control, scan the setup QR/code with a compatible authenticator app, enter the generated verification code when requested, and confirm that authenticator 2FA shows as active.
- Recovery codes: generate/review recovery codes from the Recovery control when available. Store them offline in a private location. Do not send them by email, chat, or support messages.
- Active sessions: review every signed-in browser/device. Revoke any unfamiliar session, use Revoke other sessions when appropriate, or Log out all sessions when you need to invalidate every session.
- Login history: compare browser/device, IP and time information against your own activity. If something is unfamiliar, revoke sessions and review authentication methods.
- Security events: review recent account-security activity for unexpected changes or access.
- Secure wallet export / private key: open Wallet ownership & portability in Security. VaultFi Browser loads the existing secure Turnkey export component rather than exposing the private key in ordinary page HTML. Complete the required authentication/verification presented by the secure export flow. Reveal/export the key only when you are in a private environment. Copy/store it offline and never paste it into support chat, email, websites, or forms that are not the secure export interface.
- After exporting a private key, treat anyone who sees it as having control of that wallet. If exposure is suspected, move assets to a new secure wallet.
Important notes
- VaultFi support should never need your private key, seed phrase, authenticator secret or recovery codes.
- A private key is not the same thing as a public receive address.
- External wallets remain externally signed; VaultFi does not receive an externally connected wallet's private key or seed phrase during normal external connection.
Ask VaultFi
Inside VaultFi Browser, you can ask questions such as how to use security, or type the feature name directly to open it.