Can Solid see my passwords?
No. The keyboard has no way to reach the internet, so it can't send anything you type to us or to anyone else. In a password field it also stops learning words and switches its payment buttons off.
Security
A keyboard can't leak what it can't send.
The part of Solid that sees your keystrokes has no connection to the internet at all. Your passwords and messages go to the app you're typing in, and nowhere else.
No internet in the keyboard
Never reads what's on screen
Learns nothing in password fields
Never holds your money or keys
The questions people ask us first.
Does it keep what I type?
No record of your typing. To improve suggestions it remembers plain words you've typed three times, on your phone only. Never from a password field, and never anything with a number or symbol in it. One tap erases them.
Can it read my messages?
No. It never asks the app you're typing in for what's already on screen. It knows the keys you press while it's open, which is all any keyboard needs.
Can Solid take my money?
No. Solid never holds your money and never has your keys or recovery words. Every payment is approved by you, in your own wallet app.
What if someone grabs my phone?
Solid asks for your fingerprint or PIN when it opens, again after a minute away, and before any payment. Tap the Solid mark to switch payments off completely until your fingerprint turns them back on.
What about a fake payment link?
Before anything is signed you see the amount and who you're paying. Solid warns you when an address looks like one you've paid but isn't, and names a shop only when it's genuinely verified.
Built in layers, so one slip isn't a disaster.
The keyboard
- No internet, checked on every build
- Never reads what's on screen
- Never logs what you type
Your money
- Your wallet signs every payment
- Limits per payment and per token
- Every swap checked before you sign
Your phone
- Fingerprint or PIN to open
- Blank in your recent apps
- Payments off with one tap
Your shop
- Two-step sign-in guards the money
- Payout changes are emailed to you
- Staff can't refund or withdraw
Your data
- No ads, trackers or analytics in the app
- Client details stay on your phone
- Delete what we hold, yourself
We plan for the people who'd try.
Each of these has its own defence in Solid. We keep the details of how to ourselves, because they'd help an attacker more than they'd help you.
Another app on your phone
Can't slip a payment into Solid for you to approve.
Someone with your unlocked phone
Still needs your fingerprint or PIN to pay or change a limit.
A stolen email inbox
Changing where a shop's money lands takes a two-step code too, and every change is emailed.
An altered payment link
Short links are made by the wallet that's paid, so nobody can change the amount.
A lookalike address
Gets a warning when it mimics someone you've paid before.
A dishonest staff phone
Can ring up sales, but can't move money or reuse a reward.
A tampered swap
Is caught before your wallet sees it: nothing else in it may change.
Someone posing as a shop
Never shows as verified. Only the shop's own wallet carries the check.
Things Solid will never do.
- Ask for your recovery words or keys
- Hold your money for you
- Sell or share your data
- Put trackers or ads in the app
- Message you asking you to pay or sign
- Take a cut of what you're paid
If a message that looks like it's from Solid asks you to pay or sign something, it isn't us.
Found a weakness?
Tell us before you tell anyone else, and we'll reply within 72 hours. We read every report, and we fix what's real.
Safe enough for the counter. Simple enough for anyone.
30 days free for business, and always free for personal use.
Start free for 30 days