SECURITY
Your approval is the final move.
Protect recovery words
Write them down, keep them offline and never share them. Anyone with those words can control the wallet. BUMP support will never ask for them.
Review every payment
Check the asset, exact network, amount, destination and fee on the final review screen. A QR code or nearby connection can prepare a request; it cannot approve spending by itself.
Install from an official route
Use the store link shown on the official download page when the public release is available. Direct downloads include checksums so the file can be verified before installation.
Device safety
Use a device passcode, keep the operating system updated and lock the wallet when the phone is out of your control. Restore only on a device you trust.
Responsible reporting
If you find a security issue, do not include recovery words, private keys or live payment credentials. Send the minimum steps needed to reproduce the issue to security@bumpbtc.com.