How we protect you

Security is built into Nina Wallet at every step — from how you sign in to how every naira moves.

Two-step sign-in

Every login is confirmed with a one-time code sent to your email, so your password alone is never enough to get in.

Transaction PIN

A 4-digit PIN authorises every money-out action. Too many wrong tries temporarily locks it, and weak PINs are rejected.

Encrypted credentials

Your password and PIN are stored as one-way cryptographic hashes — not as plain text. Even we can't read them.

Your card stays private

Card payments are handled by our certified partners (Stripe and Paystack). We never store your full card number or CVV.

Sessions that protect themselves

Sign-in sessions are short-lived and rotate automatically, and the web wallet logs you out after a period of inactivity.

Fraud monitoring

We monitor sign-in location and device signals to spot unusual activity and help protect your account from takeover.

Every transaction is recorded

Money movements run as atomic, idempotent ledger entries — so balances stay accurate and every credit and debit is traceable.

Controlled, audited admin access

Staff access is separated from customer accounts, protected by a second factor, role-restricted, and fully audit-logged.

How you can stay safe

The strongest protection is a careful account holder. Follow these simple rules to keep your wallet yours.

Spotted something suspicious?

If you notice unauthorised activity on your account, a phishing attempt, or you think your credentials have been exposed, tell us straight away. Security researchers can report vulnerabilities to the same address — we appreciate responsible disclosure.

security@ninawallet.com