> ## Documentation Index
> Fetch the complete documentation index at: https://docs.spendghost.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

How your funds and account are protected.

## Your funds

Wallets are created and secured with hardware‑backed key security — keys live inside secure enclaves, never in plaintext, and SpendGhost never sees them.
The ghost checks your balance and the live price before anything moves, and your payment always settles *before* an order is placed — so you're never charged for an order that didn't go through.
You're never double‑charged — a payment can only ever result in one order.
Refunds are sent on‑chain, and you get the transaction as proof.

## Your account

You're authenticated by the messaging channel itself — there's no password to phish.
Your dashboard opens from a **private, single‑use, expiring link** the ghost texts you. Sessions are short‑lived.
Saved addresses are encrypted at rest.

## Using your own wallet

If you [use your own wallet](/funding/spend-approval), the ghost can only spend up to the **limit you set** — never more — and you can change or turn it off from your dashboard at any time. Your funds stay in your own custody until an order draws on them, and you approve everything in your own wallet.

## Reporting an issue

Found something? Text the ghost or reach out to the team — security reports are taken seriously.