Security
Every layer protecting your data
Finaura has no server to breach because it has no server. Everything below protects the one place your data actually lives: your device.
PIN or Password Lock
Choose a 6-digit PIN for fast mobile access, or a text password for a longer passphrase. Either way, your data is locked behind it every time you open Finaura after a period of inactivity.
PBKDF2-SHA-256 Hashing
Your PIN or password is never stored or transmitted in plaintext. It's hashed using PBKDF2-SHA-256 with 100,000 iterations and a random salt before it ever touches storage.
Recovery Password
During setup, you create a separate recovery password. If you ever forget your PIN, use it to reset your PIN without losing any data. It's hashed the same way as your PIN and is never stored in plaintext.
Biometric / Passkey Unlock
On devices that support Face ID, fingerprint, or saved passkeys, Finaura offers a one-tap "Use Face ID / Passkey" option on the lock screen, so you can skip typing your PIN entirely.
Two-Factor Authentication (TOTP)
Add an extra layer with Time-Based One-Time Password authentication, compatible with Google Authenticator, Authy, and any standard authenticator app. Enable it in Settings -> Security -> Two-Factor Authentication.
Brute-Force Rate Limiting
After 5 failed unlock attempts, the lock screen enforces a 30-second cooldown before another attempt is allowed, slowing down anyone trying to guess their way in.
On-Device Storage Only
All of this protects data that never leaves your device in the first place. Your transactions, budgets, and accounts live in your browser's IndexedDB, never on a Finaura server, because there isn't one.
If you forget everything
Since Finaura has no account system, there's no server-side reset. If you forget both your PIN and your recovery password, the only option is the Last Resort reset, which permanently wipes all local data. This is exactly why we recommend keeping a regular JSON backup via Settings -> Export, so you can always restore on a fresh start.
Want the full walkthrough?
The User Guide covers setup, changing your PIN or password, and configuring every security layer step by step.
Read the PIN & Security GuideCurious which standards this maps to? See the Compliance page.