Skip to content

Welcome to Trusted Codes

Imagine someone calls and says they’re your CEO asking to transfer money. Or your bank asking you to confirm your account. How do you really know it’s them? They could be an AI clone, a scammer using a spoofed number.

Trusted Codes gives you a way to verify. You ask for a three-word code. If they give the right code, it’s really them. The code is cryptographic — even if someone overhears it, it’s worthless in a few hours.

Each connection generates unique code words just for that relationship. There are 8.5 billion possible combinations. Codes rotate automatically — no memory required on your part.

Most importantly: only someone with both your app and your data can provide the correct code. Guessing it is practically impossible.

Connections are for people you verify regularly. Both of you have the app. Codes change automatically forever. Highest security.

Guest Codes are for one-time situations. Someone doesn’t have the app? Create a temporary code, send it to them, done. Not as high security, but flexible.

Rule of thumb: Regular contacts = connection. One-time people = guest code.

A new account starts modest, not at zero — new accounts naturally sit low on the scale. Your score increases over time based on account age, network size, activity level, and community feedback.

When you invite someone, they see your score. A 70-day-old account with a score of 80? Seems legit. A brand-new account? Might want to verify through another channel.

It’s not about judging people. It’s about giving context.

Connections can work two ways.

Dedicated: the code is unique to this one connection. This is the default and the right choice almost always.

Shared: everyone in the connection sees the same code. Useful when a whole team must be able to answer with it.

You choose the mode when you create the connection, and the owner can change it later on the connection’s detail screen.

When you sign up, you get three special words. This is your recovery code. Write them down. Store them somewhere safe — not a screenshot, not an email.

If you get logged out everywhere, you need these words to unlock your data on a new device. Lose them? Your data is locked forever (it’s a security feature).

Treat it like a nuclear launch code.

Never share your recovery code. No support person will ask for it.

Check trust scores before connecting. Especially with strangers.

Use strong, unique passwords for your email (that’s your account gateway).

Enable the app lock. Settings → Security & recovery → Face ID & app lock adds Face ID or a fingerprint in front of the app.

Keep the app updated. Security patches matter.

If hacked: Regenerate your recovery code immediately (Settings → Security & recovery → Recovery Code), and sign out of any session you do not recognise.