Our Security Principles

Your wallet uses Safe Smart Accounts with multiple security layers:

• Your device key is secured by you phone's secure enclave
• 2/2 multisig with Doppio's signer enables:
  • Transaction limits
  • Remote lock capability
• Trusted friends or family can be added as guardians to help recover your wallet.
• Industry-standard smart contract security

• Industry-leading security standards and auditing
• Advanced features like:
  • Transaction batching
  • Spending limits
  • Social recovery
• Future-proof upgradeable architecture

The recovery process is designed to be both secure and flexible:

• Only your configured guardians can initiate recovery
• 7-day waiting period before recovery completes:
  • Prevents unauthorized recovery attempts
  • Gives you time to cancel if needed
  • Email notifications during waiting period
• Recovery replaces your device key
• No funds are ever at risk during recovery

The secure enclave provides hardware-level security for your wallet:

• Isolated secure processor separate from main CPU
• Biometric authentication required for access
• This protects against:
  • Malware and attacks
  • Unauthorized access

Recovery is quick and secure through these steps:

1. Install Doppio on your new device
2. Sign in to your Doppio account with:
   • Your email and password or social login like Google or Apple
   • Two-factor authentication (if enabled)
3. Complete identity verification (if enabled):
   • Government ID verification
   • Facial recognition match
   • Security questions (if configured)
4. Link your cloud storage (Google Drive/iCloud)
5. Set up your new device's security:
   • Enable biometric authentication
   • Create a backup PIN

Note: A 24-72 hour security timelock may apply for large balances. You'll receive email notifications throughout the process.

Your backup is protected by multiple security layers:

• Military-grade encryption (AES-256) of your private key before backup
• Secure storage location:
  • Stored in dedicated app data folders
  • Protected by Google/Apple's security infrastructure
  • Inaccessible to other apps
• Split security model:
  • Encrypted backup in your cloud storage
  • Decryption key stored separately on Doppio's servers
  • Both parts required for recovery
• Additional protections:
  • Mandatory 2FA on your cloud account
  • Regular backup integrity checks

Take these immediate steps to secure your wallet:

1. Log into doppiowallet.com/emergency from any device
2. Click "Freeze Wallet" to immediately block all transactions
3. Install Doppio on your new device
4. Sign in to your account and follow the guided recovery process:
   • Verify your identity (if enabled)
   • Link your cloud backup (Google Drive/iCloud)
   • Set up your new device's biometric security

Your funds are protected by multiple security layers:

• Biometric authentication prevents unauthorized access
• Daily spending limits cap potential losses
• Two-factor security requires both your device and Doppio's signer

Spending limits provide multiple layers of protection:

• Daily limits cap potential losses
• Large transactions require additional verification
• Limits can be customized to your needs
• Emergency lockdown freezes all transactions

• Biometric authentication required for all transactions
• Automatic lockout after failed attempts
• Remote wallet deactivation option
• Secure element protects your device key

Your wallet remains accessible through Safe's social recovery system:

1. Your trusted guardians (friends/family) can help initiate the recovery process
2. They'll use Safe's interface (or other compatable smart wallet interface) to start recovery
3. There's a mandatory 7-day timelock period during which you can cancel if the recovery was unauthorized
4. After the timelock period, you can use your wallet with any Ethereum wallet that supports Safe

This process works independently of Doppio's services.

Guardians are trusted friends or family members who can help you recover your wallet:

1. Navigate to Settings > Security > Guardians in the app
2. Add trusted friends or family members as guardians (they'll need to provide their wallet address)

Note: Guardians can only initiate recovery with a 7-day timelock period during which you can cancel unauthorized recovery attempts.

The guardian recovery process is designed to be both secure and reliable:

1. When you need recovery, contact any of your guardians
2. Any guardian can initiate the recovery process
3. Once initiated, there's a mandatory 7-day timelock period:
   • You'll receive email notifications
   • You can cancel the recovery if it wasn't authorized
   • This prevents malicious recovery attempts
4. After the timelock period completes, your wallet access is restored

Note: Guardian recovery works even if Doppio's services are unavailable.