Wallet and Security FAQ

Answers to the most common questions about wallet custody, key management, account safety, and what Alphio can and cannot do with your funds.

---

Is my wallet custodial or non-custodial? It depends on the connection type:

• SnapTrade brokers (Stock Trading) — assets are custodied by the broker (e.g. Robinhood, IBKR). Alphio talks to the broker via SnapTrade and never holds your shares or cash.
• On-chain wallets (Privy, MetaMask, WalletConnect, external) — non-custodial. You control the private key; Alphio only sees the public address and signed transactions you authorize.

Alphio never sees user private keys — not for any wallet type.

How do I export my private key?

• Privy wallets — account-controlled keys can be exported from /account/wallets. Follow the on-screen security warnings; an exported key is your sole responsibility.
• MetaMask / WalletConnect / external wallets — you already control the private key inside the wallet app itself; export from there using its native flow. Alphio has no copy to export.

I think my account was compromised. Act immediately, in this order:

1. Change your password (or rotate OAuth credentials at the provider).
2. Unbind all OAuth providers from Settings → Profile → Linked Accounts and re-bind only the one you trust.
3. Disconnect connected brokerage from /account/connections to stop any further trade authorization.
4. Contact support@alphio.ai with the timestamp of suspected compromise, IP / device if known, and any suspicious actions observed (trades, withdrawals, settings changes).

The security team can freeze the account pending investigation.

Two-factor authentication setup.

warning

Native 2FA inside Alphio is being rolled out and may not be available on your account yet. In the meantime, the supported sign-in methods include OAuth (Google / Apple / Microsoft / Facebook) — enabling 2FA on the OAuth provider itself protects your Alphio login through that provider.

What does Alphio see vs not see in my connected broker? When you link a broker via SnapTrade, Alphio gets a read-only view by default:

Visible to Alphio	Not visible
Current positions	Broker login credentials
Account balances	Linked bank accounts
Trade history	Tax documents
Order status (for orders placed through Alphio)	Personal info beyond what SnapTrade exposes

Trade execution is a separate authorization: every order requires explicit user confirmation, with no standing execution permission granted by default.

Can Alphio move funds without my approval? No. Every trade requires one of the following authorizations:

• Manual mode — you confirm each order on the Trade Modal before submission.
• Auto Trade — orders fire based on a pre-configured rule that you set up and can disable at any time.
• Agentic Trading — orders pass through an approval gate that you respond to per order or per plan.

Alphio does not have standing authority to move cash, transfer between accounts, or withdraw funds.