> For the complete documentation index, see [llms.txt](https://zerotick-trade.gitbook.io/documentation.v1.2/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://zerotick-trade.gitbook.io/documentation.v1.2/getting-started/security-and-backup.md).

# Security & Backup

Your ZeroTick wallet is non-custodial: the keys live with you, not with ZeroTick. This page explains what that means, how your recovery kit backs up your wallet, and the controls that protect your funds day to day.

{% hint style="danger" %}
Anyone who has your private keys or recovery kit can move your funds. ZeroTick never stores your keys and can never recover them for you. Keep your keys and your recovery kit offline, never share them, and never paste them into any website or send them to support.
{% endhint %}

### Why ZeroTick cannot lose your keys

ZeroTick wallets are built on Openfort embedded wallets. Your keys are generated on your device and secured with Shield encryption (split key shares), so the full key is never sent to ZeroTick servers. ZeroTick never signs on your behalf and cannot move, freeze, or restore your funds. That is what non-custodial means: full control sits with you.

The trade-off is responsibility. Because no one can reset your access for you, your backup is what guarantees you can always get back in.

| Held on your device                                    | Held by ZeroTick                              |
| ------------------------------------------------------ | --------------------------------------------- |
| Your private keys, via Shield encryption               | No copy of your keys                          |
| Every signature for trades, transfers, and withdrawals | The app interface and market data only        |
| Your recovery kit and any wallet password              | No way to move, freeze, or recover your funds |

### Your recovery kit

Your recovery kit is a single downloadable file that backs up everything needed to restore your wallet in any compatible external wallet. It is your most important backup.

The kit contains:

* Your **EVM private key** and address. One key controls the same address on every EVM chain ZeroTick supports: Ethereum, BSC, Base, Arbitrum, Optimism, Polygon, and Monad.
* Your **Solana private key** and address.
* Plain-language import instructions for each chain, plus an integrity checksum so you can tell the file has not been altered.

ZeroTick embedded wallets do not use a traditional seed phrase. Shield encryption secures your wallet instead, so you back up with private keys rather than a 12-word phrase.

#### Choose a format

| Format        | File  | Best for                                                                                                            |
| ------------- | ----- | ------------------------------------------------------------------------------------------------------------------- |
| **Document**  | .html | A readable, printable page. Keys are visible to anyone who opens it, so keep it offline (a safe or lockbox).        |
| **JSON**      | .json | Structured data for importing into tools. Keys are in plain text, same care as the Document.                        |
| **Encrypted** | .enc  | Storing on a USB drive, in the cloud, or anywhere the file could be seen by others. Locked with a password you set. |

{% hint style="warning" %}
The **Document** and **JSON** formats store your keys in readable form. If your backup could ever be seen by anyone else, choose **Encrypted** and set a password of at least 8 characters. If you lose that password, the encrypted file cannot be opened, so store it as carefully as the keys themselves.
{% endhint %}

You can download your recovery kit any time from **Account & Security**, under **Wallet & Security**. ZeroTick also prompts you to save it during onboarding, after you accept the Terms of Service. Before the kit is generated, you confirm your identity, either automatically through your login or with your wallet password if your wallet uses one.

For the full walkthrough, see the [Recovery Kit guide](https://zerotick-trade.gitbook.io/documentation.v1.1/user-guides/recovery-kit).

### Viewing a single private key

If you only need to import one wallet into an external app like MetaMask or Phantom, you can reveal and copy a single private key inside ZeroTick instead of downloading the whole kit. Open **Account & Security**, then **Wallet & Security**, and choose **Export Private Key**. ZeroTick asks you to confirm your identity and acknowledge a warning before the key is shown.

Your recovery kit contains every key at once, so use the kit for a complete backup and single-key export only for a one-off import.

### Extra protection you control

Beyond your backup, **Account & Security** gives you optional controls that add friction to sensitive actions.

* **Two-factor authentication (2FA).** ZeroTick uses time-based codes from an authenticator app (Google Authenticator, Authy, 1Password, and similar), plus one-time backup codes. Once you turn it on, every withdrawal to an external address requires a fresh code by default. You can also require a code on trades above an amount you choose.
* **Spending caps.** Set a maximum USD value for a single buy or trade. ZeroTick enforces caps on its servers before any transaction is prepared, so a cap protects you even if you have not turned on 2FA. An action above your cap is blocked.
* **Account lock.** Restrict external withdrawals to a saved list of addresses you approve in advance.

Manage all of these in [Security settings](https://zerotick-trade.gitbook.io/documentation.v1.1/user-guides/security-settings) and [Two-factor authentication](https://zerotick-trade.gitbook.io/documentation.v1.1/user-guides/two-factor-authentication).

### If you lose your device

You have two independent ways back to your funds.

**Log back in.** Use the same login method you signed up with. Your EVM and Solana wallets are tied to your ZeroTick account and restore automatically. Nothing else is needed.

**Restore from your recovery kit.** Import your private keys into any compatible external wallet: MetaMask or any EVM wallet for the EVM key, Phantom or Solflare for the Solana key. This works even if ZeroTick is unavailable, which is exactly why the kit is worth keeping.

{% hint style="info" %}
Your assets live on-chain, not inside ZeroTick. As long as you hold your keys, you can reach your funds from any compatible wallet, with or without ZeroTick.
{% endhint %}

### Common questions

<details>

<summary>Does ZeroTick keep a copy of my keys?</summary>

No. Your keys are generated on your device and never sent to ZeroTick servers. ZeroTick cannot move your funds and cannot recover your keys or your recovery kit for you. Your saved backup is the only way to restore access outside your ZeroTick login.

</details>

<details>

<summary>Do I have a seed phrase to write down?</summary>

ZeroTick embedded wallets do not use a traditional 12-word seed phrase. Shield encryption secures your wallet, and you back it up with your private keys through the recovery kit. Treat those keys with the same care you would give a seed phrase.

</details>

<details>

<summary>What if my wallet uses a wallet password and I forget it?</summary>

A wallet password is optional and applies only to wallets set up with one. ZeroTick does not store it and cannot reset it, so store it safely if your wallet uses one. Your recovery kit still restores your funds in any external wallet, independent of that password.

</details>

### Related pages

<table data-view="cards"><thead><tr><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><strong>Recovery Kit</strong></td><td>Download your backup, choose a format, and store it safely.</td><td><a href="https://zerotick-trade.gitbook.io/documentation.v1.1/user-guides/recovery-kit">https://zerotick-trade.gitbook.io/documentation.v1.1/user-guides/recovery-kit</a></td></tr><tr><td><strong>Two-factor authentication</strong></td><td>Add a code check before withdrawals.</td><td><a href="https://zerotick-trade.gitbook.io/documentation.v1.1/user-guides/two-factor-authentication">https://zerotick-trade.gitbook.io/documentation.v1.1/user-guides/two-factor-authentication</a></td></tr><tr><td><strong>Security settings</strong></td><td>Set spending caps and choose when 2FA is required.</td><td><a href="https://zerotick-trade.gitbook.io/documentation.v1.1/user-guides/security-settings">https://zerotick-trade.gitbook.io/documentation.v1.1/user-guides/security-settings</a></td></tr><tr><td><strong>Set up your wallet</strong></td><td>How your non-custodial multichain wallet works.</td><td><a href="https://zerotick-trade.gitbook.io/documentation.v1.1/getting-started/set-up-your-wallet">https://zerotick-trade.gitbook.io/documentation.v1.1/getting-started/set-up-your-wallet</a></td></tr></tbody></table>