Our Security Principles

Your private key is mathematically split into two parts:

• One part stays on your device
• The other part is stored on Doppio's servers
• Both parts must work together to sign transactions
• Neither part alone can be used to access funds

Your funds remain secure because:

• Hackers would only get Doppio's key share
• Your device key share remains secure
• Doppio cannot move your funds without your approval
• If a security event is detected, Doppio can safely migrate its server keys without affecting your device

Our MPC signing process uses industry-leading security measures:

• End-to-end encryption for all communications
• Industry-standard MPC protocol by Fireblocks, open-source and peer-reviewed (GitHub)
• Trusted execution environment (TEE) protects server-side keys
• Secure enclaves protect device-side keys

Recovery is simple and secure:

1. Install Doppio on your new device
2. Sign in with your Doppio account
3. Depending on your security settings:
   • You may need to verify your identity through additional secure methods
   • A mandatory waiting period may be enforced (typically 24-72 hours)
   • During this period, you'll receive email notifications to verify this recovery is authorized
4. Once all security checks are complete, your wallet will be automatically restored

Yes, in addition to the normal assisted recovery process, there is an emergency recovery process. See the Shutdown Protection section for more details.

Your backup is protected by multiple security layers:

• Only accessible through your Google account or Apple ID
• Doppio helps verify your account has strong security (2FA/MFA)
• Backup is encrypted with a strong encryption key that is securely stored on Doppio's servers

Take these immediate steps to secure your wallet:

1. Visit doppiowallet.com/emergency on any device
2. Sign in to your account and click "Lock Stolen Device"
3. Your wallet will be immediately frozen and the device deactivated
4. Follow the guided recovery process to set up your wallet on a new device

Note: Your funds are protected by biometric/PIN security even if these steps are delayed.

Spending limits provide multiple layers of protection:

• Daily limits cap potential losses
• Large transactions require additional verification
• Limits can be customized to your needs
• Emergency lockdown freezes all transactions

• Biometric authentication required for all transactions
• PIN authentication as a fallback when biometrics are unavailable
• Automatic lockout after failed attempts
• Remote wallet deactivation option
• Secure element protects your device key share

If Doppio ever shuts down, you can recover your funds through these steps:

1. Access your emergency recovery kit:
   • Located in your Google Drive / iCloud Drive
   • Contains your complete seed phrase backup
   • Protected by strong encryption
2. Decrypt the recovery kit using either:
   • Your emergency recovery password
   • Coincover's backup service (if enabled)
3. Import your seed phrase:
   • Use our open-source recovery tool
   • Or import into any compatible wallet
   • Full compatibility with BIP39 standard

Note: We recommend testing this recovery process when you first set up your wallet to ensure you're familiar with the steps.

The emergency recovery kit is your safety net:

• Encrypted backup of critical wallet data
• Automatically stored on your Google Drive / iCloud Drive
• Protected by your recovery password
• Contains instructions for various recovery scenarios
• Updated automatically when needed