How we Secure Your Funds

Security is the first pillar of our approach and fundamental to how we built Nook

Security and Risk Management

Security is the first pillar of our approach and fundamental to how we built Nook.

Nook has millions of dollars in deposits and has processed over $500M in transactions. Across our thousands of customers, trust in Nook’s approach to securing funds is paramount. In this post, we go deeper into how Nook approaches security and risk.

Security

How we secure your funds on Nook

We prioritize the security of your assets with multiple layers of protection. Your funds are held in a secure, non-custodial wallet that only you control. Below, we outline the infrastructure we use to secure your funds.

Wallet ownership and encryption

Your funds are secured in a non-custodial wallet that only you control. We use encryption provided by Privy, which supports wallets for over 75 million users. Nook does not store your confidential seed phrase. You always retain control of your wallet.

We support two-factor authentication via biometrics, including Face ID on iOS and Android devices.

iOS and Android app only

By focusing on the official apps in the Apple App Store and Google Play, Nook cannot be convincingly imitated by a website. We will never ask you to log in on a website. This helps prevent phishing—sites that look like ours but aren’t. Using the iOS and Android apps is the most secure way to ensure you’re connecting to the real Nook app.

Highest-rated partners

We work with Stripe and Coinbase to protect your login and identity. By partnering with these world-class providers, we help ensure that your personal information and funds remain secure and private. Stripe and Coinbase have processed over $1 trillion in payments and serve over 100 million customers.

Encrypted personal information

At Nook, we do not store your personal information. If Stripe (our banking/KYC partner) requires information such as your date of birth or address, we pass it through securely using encrypted methods and do not store it in our systems. This keeps your information private and secure.

Built and operated in the U.S.

We are incorporated in Delaware and headquartered in Austin, Texas.

We do not work with third-party engineering teams outside the U.S., helping us maintain strong compliance and data security standards.