.png)
.webp)
We're building a self-custodial Bitcoin neobank. Part of this mission is to provide bank-grade protection for our users. Today, we're upgrading the app by introducing biometric passkeys & PINs to tighten your account's security.
Biometric passkeys replace OTP codes. Wherever the app asked for a code from your phone or email, your passkey answers instead: logging in, checking card details or making a transfer. Email & mobile codes stay as a fallback option.
The Session PIN. Four digits, chosen by you, that get you back in after a short break without repeating the whole login process.
Both meet Strong Customer Authentication, the standard European banks work under.
Passkeys explained
A passkey is a key pair. Your device securely keeps the private half behind Face ID or Touch ID. wave.space only ever holds the public half, worthless to whoever steals it. Most importantly, your passkey answers to the wave.space domain alone, so no lookalike site can trigger it, however convincing the page looks.
Your passkey logs you in, confirms transactions, and shows your card details. It is the fastest and the most secure way to use wave.space. We highly encourage you to set your passkey now. SMS codes remain as a fallback for anyone who has not set one up.
The PIN after 5 minutes of no usage
Your session expires after five minutes without activity. Navigating, typing, tapping: any of it resets the timer. At four minutes a warning appears with a sixty-second countdown and a Continue button. Let it run out and your account data comes off the screen.
Come back, type four digits, and you are in.
P.S. If you toggle "Trusted device" during PIN entry, you will only need to enter your PIN next time the session expires. Otherwise, after 5 minutes of inactivity you will be fully logged out on devices you don't trust.
What you need to do
1. At your next login you will be prompted to set your PIN: confirm your second factor, then choose and confirm four digits. Under a minute, with your existing 2FA left as it is.
2. Set up your passkey here to enjoy much smoother UX, and an added layer of biometric security.
