Security
Zumo is a registered cryptoasset business with the UK’s Financial Conduct Authority (Reg. no 901033) and we make it our priority to bring you products you can use and trust. Zumo offers both custodial (‘Trade’) and non-custodial (‘Infinite’) wallets – find out what that means from a user and security perspective in our explainers here and here.
Secure your assets with Zumo Infinite
Zumo Infinite is an ultra-secure, decentralised wallet that only you can access. This means that nobody else is ever in possession of, or has access to, your assets (including us!)
Your crypto is securely held on the blockchain.
Blockchain technology started a revolution in secure global payments and asset transfers. It’s being adopted all over the world to connect people directly with each other, reducing transaction fees and increasing security.
Zumo’s decentralised infrastructure removes the middleman – you send funds to other users directly via the blockchain and all transactions are secure, traceable and cannot be tampered with.
Most importantly, you hold your own assets: we cannot withdraw any assets held in your Zumo Infinite wallet, as only you control the private keys.
Exchange with Zumo Trade
Zumo Trade is a custodial wallet service that integrates with your Zumo Infinite wallet to give you access to fast, low-cost exchanges. Because it is a custodial service, you entrust the custody and administration of your assets to Zumo on your behalf. For any funds you hold in your Zumo Trade account:
- Your assets are held in reserve on a 1:1 basis within our custodial service and are not used for any other purpose.
- The funds remain available for you to withdraw at any time, either to your nominated e-money account or (if enabled) your Zumo Infinite wallet.
Securing your Zumo Infinite wallet
When you create your Zumo Infinite wallet, you generate a public and a private key. Your private key is a passphrase made up of 12 random words. This is the backup phrase that is generated when you first create your Zumo Infinite wallet – and is unique to your Infinite wallet. If you ever lose access to your Zumo Infinite wallet, you’ll be able to recover your account with this backup phrase. For your security, Zumo does not have any access to or record of your Zumo Infinite wallet backup phrase, so keeping it safe is your number one priority.
Security Features
Privacy by design
We have your privacy and security at the top of our agenda and we only store the data that we’re legally required to hold.
True end-to-end encryption
All cryptographic keys are generated and managed on your device and all encryption is done locally. This means that we never have access to your private key.
Brute force attack protection
Zumo uses 1,000,000 PBKDF2 iterations in the process of deriving encryption keys for your security access. This reduces the effectiveness of any potential brute force attack.
Encrypted in transport
When your already encrypted data travels between your device and our servers, it is encrypted and authenticated by Secure Sockets Layer (SSL).
What if I lose access to my wallet?
For your Zumo Infinite wallet, you’ll be able to use your backup phrase to instantly regain access to your account.
In the future there may be other ways to recover your account but for now, you can rest assured that with your backup phrase you will always have access to your funds.
Your Zumo wallet has been designed from the outset for maximum user and transactional security.