Passcode and biometrics in the app

In the mobile app, you can lock access with a short 4-digit code, and on top of that — with a fingerprint or Face ID. This is convenient if you're not the only one using the phone.

Main point: This is a lock, not a separate login

The code and biometrics here are a local lock on top of an already completed login, not a way to log in:

• You log in with your username and password (and two-factor authentication, if enabled). After that, the phone remembers your session.
• The code and fingerprint/Face ID do not replace the password and are not sent anywhere to the server — they only unlock an already open session on this device.

How to enable it

Right after your first login, the app will ask: "Protect login?"

• If you agree, you'll create a 4-digit code and repeat it. Then, if your phone has fingerprint/Face ID, the app will offer to enable quick login with biometrics (you can skip this).
• If you choose "Not now", you simply log into the app without protection. You can enable it later in Menu → Security.

In the Security section, you can set, change, or disable the passcode at any time. The biometrics toggle appears there only when a code is already set — biometrics work on top of the code, not instead of it.

How it works next

When protection is enabled, the app shows a keypad instead of the login screen and asks for the code:

• Every time the app starts (you're already logged in, but the data is hidden until you enter the code).
• When returning from the background — if you've been away for longer than the set time. By default, this is one minute: if you stepped away to a messenger for a confirmation code and came right back, the code won't be requested. If you were gone for a long time, it will be.

While the app is minimized, its content is always hidden by a placeholder — your balances are not visible in the app switcher, even if the code isn't requested. These are different things: the screen is hidden immediately, and the lock engages based on time.

The time can be changed in Menu → Security → "Request code": immediately, after 15 seconds, after a minute, or after 5 minutes. The "Immediately" option means the previous strict behavior: code on every return.

The window is convenient, but it weakens security: a phone taken while unlocked will open the app within this time frame. If someone else uses the phone, set it to "Immediately".

If biometrics are enabled, when the keypad appears, fingerprint/Face ID is immediately offered, and it's requested once — upon successful authentication, the app opens immediately (until 2026-08-10, it asked twice in a row on login). There's a fingerprint button at the bottom right to retry manually. If you cancel biometrics, simply enter the code. Until unlocked, financial data is not displayed on the screen.

Forgot your code

At the bottom of the keypad on the left, there's "Forgot code?". Tapping it (as well as 3 incorrect attempts in a row) resets the code and logs you out to the regular login screen. After logging in again with your username and password, the app will prompt you to set up protection again — just like on the first login. This way, you can always restore the code by knowing your account password.

What's important to know

• The setting is tied to the device, not the account, and is erased when you log out — upon the next login, you'll be prompted to set up protection again.
• Biometrics work only with the code. It cannot be enabled separately, without a code.
• You need to have biometrics set up in the system. If you haven't set up a fingerprint or Face ID on your phone, the biometrics step won't appear.
• This is only for the mobile app — there's no such lock in the web version.
• Camera, gallery, "Share," and browser payments do not lock the app. When you photograph a receipt or choose where to save a backup, the app formally goes to the background — but it went there at our request, and requiring a code upon return would disrupt the form you were filling out. For such transitions, you get up to 5 minutes regardless of your lock timeout. This is a window, not a cancellation of the lock: you can put the phone down with the camera open, and after five minutes, the code will still be requested.
• If the system runs out of memory and unloads the app while the camera was open, the code will be requested upon return: this is no longer a return from the background, but a fresh launch, which always requests the code.

In short