Security & custody
How your keys are held, what signs automatically, what always needs your password, and what Torch can never do.
Your keys stay in secure hardware
Every Torch account gets its own wallets, held in Turnkey secure enclaves. Keys are created inside that hardware and never leave it. Torch's servers never see your private key, and neither does your browser or Telegram.
What signs automatically, and what needs you
| Who approves | Examples | |
|---|---|---|
| Everyday trades under your auto-approve limit | Signed automatically | Buys and sells, take-profit and stop-loss fills |
| Everything else | You, with your password (or your linked browser wallet) | Withdrawals to a new address, large trades, launches, claims, key export, security updates |
Automatic signing is limited by rules enforced inside the secure hardware, not just by Torch's code: it can only trade through approved exchanges into your own wallet, only up to your limit, and it can never change its own permissions or export a key. There is also an hourly cap on automatic signing, so even in a worst case the amount at risk stays bounded.
You choose the auto-approve limit with /threshold in the bot or in Terminal settings. Set it to an amount you'd be comfortable with.
Your password
- You set it once, in the bot's in-Telegram app or when you first use the Terminal.
- It never leaves your device in readable form. Torch can't read it.
- Repeated wrong attempts pause further tries for a while.
- It can't be reset. Export your keys as your backup (see below).
Security updates
When Torch adds a new chain or exchange, your wallet's allow-list needs a one-time security update, approved with your password. Until then, automatic trades to the new place are refused, while password-confirmed actions keep working. If a trade says your wallet needs a security update, that's what it means.
Export and backup
You can export your private keys at any time (/exportkey in the bot, Account → Export in the Terminal). The key is decrypted on your device only. EVM and Solana keys are separate, so back up both. Anyone with the key controls the funds: store it like cash, offline.
Launchpad safety
- Torch launchpad tokens have no owner, mint, pause or blacklist, and their liquidity is locked forever.
- Fee settings can only change through a 48-hour public timelock, and never per token: no admin can move a token's funds or change a creator's split.
- The launchpad and $TORCH contracts are verified on the explorer. See Official addresses.
What Torch can never do
- Read or reset your password.
- See, export or rebuild your private key.
- Send your funds to someone else's address without your password.
- Raise its own signing permissions on your wallet.
- Pull liquidity from a Torch launch.
What you should do
- Export both keys and keep them offline.
- Keep your auto-approve limit sensible.
- Check token addresses; names and logos can be copied.
- Never share your password or keys. Torch support will never ask for them, and will never DM you first.