Bron's security is built in layers. The base is the same for everyone and works from day one. The layers above it are yours to add as your workspace and team grow. Each layer covers a different risk, so no single mistake or stolen login is enough to move your funds.
1. Built in from day one
These work for every workspace automatically. There is nothing to turn on.
MPC key shards. Your key is never created as one piece. It is split into three shards kept in different places, and no single device or party ever holds it whole. There is no seed phrase to lose or have stolen.
Passkeys. You sign in with a passkey instead of a password, so there is no password to phish, guess or leak.
Trusted devices. Signing in is not enough to move funds. Transactions can only be signed from a device you have trusted in the Bron desktop or mobile app.
New-device cool-down. After a sign-in from a new device or browser, sensitive changes, such as editing users or policies, wait up to 2 days. Someone with a stolen login cannot quickly switch off your safeguards.
2. Your account
These protect you personally and help you get back in if something goes wrong.
2FA. A code from an authenticator app adds a second check when you sign in on a new device and during recovery.
FaceScan and Guardians. Ways to get your access back if you lose your passkeys or devices: a face scan, or codes from two people you trust.
Hidden Account. Hides an account and its balance behind a PIN, so people looking at your screen don't see it.
Inheritance. If something happens to you, the people you choose can take over the workspace after a long waiting period, which anyone involved can stop.
3. Your team
These make sure no single person can take over the workspace.
User roles. Everyone gets only the access they need: Owners run the workspace, Members work with assets, Viewers can only view. Guardians and Beneficiaries only take part in recovery and inheritance.
Security policies. Important changes to users, owners, limits or the address book wait 48 hours or need approval from your team before they apply.
4. Your funds
These decide where your funds can go and how much can leave at once.
Address book lock. Funds can only be sent to addresses saved in your address book.
New address lock. A newly added address cannot receive funds for 48 hours, which gives your team time to spot anything unusual.
Transaction limits. Transfers above an amount you set need approval or wait before they go through.
See your setup
Security Centre shows which layers you have on and suggests what to add next.
If you have questions, contact our support team via messenger on the Bron platform or by email support@bron.org.
đ Questions about how this works for your team? Book a call with our product team