Welcome to Trusted Codes
What This App Actually Does
Section titled “What This App Actually Does”Someone calls and says they are your CEO, asking you to move money. Or your bank, asking you to confirm your account. They could be an AI clone or a scammer calling from a spoofed number, and the voice alone tells you nothing.
Trusted Codes gives you a way to check. You ask for a three-word code, and if the words are right, it really is them. The code is cryptographic, so someone who overhears it holds nothing worth using a few hours later.
Why the Code Works
Section titled “Why the Code Works”Each connection derives its own words for that one relationship, out of 8.5 billion possible combinations. The words rotate on their own, so there is nothing for you to remember.
Only someone who has both the app and your data can produce the correct words. Guessing them is not practical.
Connections vs Guest Codes
Section titled “Connections vs Guest Codes”Connections are for the people you verify regularly, and both of you need the app. The words keep changing for as long as the connection exists.
Guest codes cover one-time situations. If the other person does not have the app, you create a temporary code and send it to them. A guest code is not as secure as a connection, and it is more flexible about who can use it.
A contact you deal with regularly belongs in a connection. Someone you will verify once is a guest code.
Your Trust Score Explained
Section titled “Your Trust Score Explained”A new account starts modest rather than at zero, because new accounts naturally sit low on the scale. The score rises with the age of the account, the size of your network, how active you are, and feedback from the community.
Whoever you invite sees your score. An account that is 70 days old and scores 80 is one somebody has been using; a brand-new account is a reason to verify through a second channel first.
The score gives you context. It does not judge the person behind the account.
Code Modes (Dedicated / Shared)
Section titled “Code Modes (Dedicated / Shared)”Connections work in one of two modes.
| Mode | What the code is |
|---|---|
| Dedicated | The words are unique to this one connection. This is the default and almost always the right choice. |
| Shared | Everyone in the connection sees the same words, which matters when a whole team has to answer with it. |
You choose the mode when you create the connection, and the owner can change it later on the connection’s detail screen.
Your Recovery Code
Section titled “Your Recovery Code”Signing up gives you three special words. That is your recovery code. Write them down and store them somewhere safe, not in a screenshot and not in an email.
If you are ever signed out everywhere, those words are what unlock your data on a new device. Nobody can reissue them for you, so losing them locks your data for good. That is a security feature, not an accident.
Staying Safe
Section titled “Staying Safe”Never share your recovery code. No support person will ask you for it.
Check trust scores before you connect, above all with strangers.
Use a strong, unique password on your email account, because that is the gateway to your Trusted Codes account.
Turn on the app lock under Settings → Face ID & app lock, which puts Face ID or a fingerprint in front of the app.
Keep the app updated, so that security fixes reach you.
If you think somebody has got into your account, regenerate your recovery code at once under Settings → Security & recovery → Recovery Code, and sign out of every session you do not recognise.