Security and passkeys

MoneyVue accounts are protected by a password, with passkeys as a stronger, optional second method.

Passwords

• Minimum 8 characters at sign-up.
• Stored as a salted hash; the plaintext is never written to disk.
• Changing a password invalidates all existing sessions on other devices.

To change your password:

1. Open your Profile page.
2. Click Change Password.
3. Enter the current password and a new one.
4. Save.

Forgot your password? Use Forgot password on the sign-in page. A reset link is emailed to the address on file. Reset links expire after 1 hour.

Passkeys

A passkey lets you sign in with Face ID, Touch ID, Windows Hello, or a hardware security key — no password to type.

To add a passkey:

1. Open your Profile page.
2. Find the Security section.
3. Click Add a passkey.
4. Follow your operating system's prompt (Face ID / Touch ID / hardware key).

The passkey is associated with your MoneyVue account and the device you registered it on. Add a separate passkey on each device you want to use.

To sign in with a passkey:

• On the login page, click Sign in with Passkey.
• Confirm with your biometric or hardware key.

Removing a passkey

In Profile → Security, click Remove next to a registered passkey. The remaining passkeys (and your password) still work.

Biometrics on mobile

Passkeys are how mobile biometrics will unlock the app. Set up a passkey on your phone, and the next sign-in uses Face ID or Touch ID. Once native iOS and Android apps ship, the same passkeys work there too.

Sessions and refresh tokens

A successful login issues a short-lived access token and a long-lived refresh token. Closing the tab does not sign you out. To force sign-out on all devices, change your password.

FAQ

Should I use a password manager? Yes. A password manager plus a passkey on each device is the most resilient setup.

What if I lose access to my passkey device? You can still sign in with your password. Add a new passkey on the new device, and remove the old one from the Security section.

Does MoneyVue support 2FA codes? Passkeys are the supported strong-auth path. Codes from authenticator apps (TOTP) are not currently offered.