> ## Documentation Index
> Fetch the complete documentation index at: https://docs.itsgrand.app/llms.txt
> Use this file to discover all available pages before exploring further.

# How Grand keeps your funds and identity safe

> Grand is built on self-custody, passkey authentication, and audited smart contracts — so your assets stay yours, on-chain and verifiable at all times.

Security at Grand is not a feature layered on top of the product — it is the foundation the entire app is built on. Every interaction, from logging in to executing a trade, is protected by a combination of device-bound passkeys, biometric authentication, and independently audited smart contracts. You remain in control of your assets at all times.

## Core security principles

<CardGroup cols={2}>
  <Card title="Self-custody by default" icon="key">
    You own your wallet and your keys. Grand never takes control of your assets, which eliminates counterparty risk entirely.
  </Card>

  <Card title="Passkey and biometric login" icon="fingerprint">
    Every trade, transfer, or settings change requires biometric approval via Face ID or Touch ID. Your passkey is bound to your device and cannot be extracted.
  </Card>

  <Card title="Audited-only listings" icon="file-shield">
    Independent security audits validate the integrity of Grand's partners contracts and infrastructure before they go live.
  </Card>

  <Card title="No hidden risks" icon="eye">
    All assets are held on-chain, visible and verifiable by anyone. Nothing is held with intermediaries.
  </Card>
</CardGroup>

## Additional protections

<Steps>
  <Step title="Gas-free transactions" icon="gas-pump">
    Grand covers gas costs on your behalf. You never need to manually configure gas settings, which eliminates a common source of errors and exploits.
  </Step>

  <Step title="Withdrawal controls" icon="lock">
    Every withdrawal is gated behind your passkey. No action can be taken without biometric confirmation from your registered device.
  </Step>

  <Step title="Social recovery" icon="rotate-right">
    If you lose your device, you will be able to recover access through your Apple or Google login combined with Grand's passkey recovery options — without exposing your private keys.

    <Note>
      Social recovery is **coming soon**. In the meantime, keep your Apple or Google account secure, as it is your primary recovery path.
    </Note>
  </Step>
</Steps>

## Audited-only listings

Grand only surfaces assets, protocols, and applications that have passed a security review. Nothing is listed without verification.

| Category               | What it means                                                                   |
| ---------------------- | ------------------------------------------------------------------------------- |
| **Audited tokens**     | Assets backed by reputable audits and proven security standards.                |
| **Verified protocols** | DeFi protocols and vaults with third-party security reviews.                    |
| **Trusted dApps**      | Applications must pass both security and reliability checks before integration. |

## Security FAQ

<AccordionGroup>
  <Accordion title="What happens if I lose my device?">
    You can recover your account using your Apple or Google login combined with Grand's passkey recovery options. Your private keys are never exposed during this process.

    <Tip>
      Make sure your Apple ID or Google account has two-factor authentication enabled. This is your primary recovery path if you lose access to your device.
    </Tip>
  </Accordion>

  <Accordion title="Is Grand custodial?">
    No. Grand is fully self-custodial. Your assets are always yours, held on-chain. Grand never takes custody of your funds or controls your private keys.
  </Accordion>

  <Accordion title="How do I know the contracts are safe?">
    All Grand smart contracts are independently audited before deployment and continuously monitored after launch. Audit reports will be published in Grand's transparency documentation.
  </Accordion>

  <Accordion title="What is a passkey and why does Grand use one?">
    A passkey is a cryptographic credential bound to your specific device and biometrics. It replaces passwords with something that cannot be phished, guessed, or stolen — because it never leaves your device. Grand uses passkeys so that every sensitive action requires physical confirmation from you.
  </Accordion>
</AccordionGroup>