Policies & controls

Privy’s wallet system offers powerful yet flexible control options that determine who can access and use wallets. These controls serve as the foundation for wallet security while ensuring a seamless user experience.

​

Security without compromise

Privy wallets are designed with security at their core. Our approach uses a combination of key splitting (Shamir’s secret sharing) and private key reconstitution in secure execution environments to ensure that only authorized parties can access their wallets. Wallets remain fully non-custodial and users ultimately have full control over their assets.

​

Flexible owner configurations

Whether you want users to have complete control of their wallets or your application needs to manage certain aspects, Privy’s control model can be configured to match your exact requirements. This enables setups like:

• User self-custody: Give users full control over their wallets.
• Server sessions: Users can allow apps to take certain actions on their behalf.
• Application-managed wallets: Maintain certain controls at the service level.
• Shared control: Require a quorum of parties are required to approve certain actions.

​

Robust policies

Policies are rules that govern what actions can be taken with a wallet. Think of them as guardrails that ensure wallets are only used for intended purposes.

• Transaction limits: Set maximum amounts that can be transferred.
• Approved destinations: Specify recipients where funds can be sent.
• Contract interactions: Control which smart contracts can be used.
• Action parameters: Define what specific operations are permitted.

Policies help protect users and applications by preventing unauthorized or unintended actions, making them essential for features like payment subscriptions, trading limits, or scheduled transactions.

​

Enhanced security options

Privy supports additional security measures for sensitive wallet operations include:

• Multi-factor authentication using TOTP, passkeys, and SMS
• Biometric verification
• Hardware security key support
• And more

​

Getting started

To learn more about implementing specific controls and policies for your application, explore our detailed documentation on wallet policies and controls.