> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sonar.trade/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> How your funds are secured, and how to protect your account with 2FA.

No single app, login or web-facing part can move funds on its own.

## How Your Funds Are Secured

> [card] Audited
>
> By Cantina, our security partner since December 2024.

> [card] Smart-Contract Vault
>
> Funds sit in a smart contract (EVM) or program (Solana), not in a wallet someone holds. Strategies execute inside it.

> [card] Isolated Signing
>
> Signing keys live in a separate, isolated signing service. Apps and databases never hold raw keys.

> [card] Separate Services
>
> Funding, execution, sending and the API each have scoped permissions, over encrypted connections off the public internet.

> [card] Multisig
>
> Contract ownership and admin roles need multisig approval.

> [card] Sign-in
>
> Handled by a separate login service (email code, wallet, optional 2FA), apart from custody.

## Two-Factor Authentication

Add a second step with an authenticator app: a code when you log in, and optionally every time you send.

**1. Open Settings**

Then the Security tab.

**2. Enable 2FA**

Switch it on and connect your authenticator app. Sonar then asks for a code when you log in.

**3. Use 2FA On Withdraw**

Switch this on too, and every send asks for a 2FA code. It only works once 2FA is on.

![2FA settings in the Sonar app: Enable 2FA and Use 2FA On Withdraw](https://docs.sonar.trade/images/docs/live/two-factor.png?v=20261104i)

> [!TIP]
>
> **Earn Points**\
> Setting up 2FA completes a [quest](https://docs.sonar.trade/rewards/points.md).

## Related

> [card] [Privacy](https://docs.sonar.trade/privacy/privacy-layers.md)
>
> What stays private in the Vault, and what is public in a wallet.

> [card] [Send](https://docs.sonar.trade/money/send.md)
>
> Ask for a 2FA code on every send.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.