Account security
Two-factor authentication
A six-digit code from your authenticator app, asked for before a private key is shown and before money leaves to an outside address. Ten recovery codes cover a lost phone.
Two-factor adds a code step in Zipr before a private key is shown or funds leave to another address. After five wrong codes the account waits 15 minutes. The secret is stored sealed on Zipr's server and only compared against the code you type. It can't sign or move anything. Keys of Zipr wallets stay sealed in this browser.
Hardware wallet
Connect a Ledger for the strongest signing security. Your keys stay on the device and never touch Zipr or your browser. Trezor support: Soon