Sign-in, passkeys and recovery

Relay uses X’s official sign-in. You never give Relay your X password. Relay identifies you by your X account’s permanent id, so earnings follow you if you change your handle, and nobody gets them by taking a handle you gave up.

Signing in shows your balances and history. On its own it cannot add bank details or approve a withdrawal.

A passkey is a key stored on your phone, computer or password manager, unlocked with your fingerprint, face or device PIN. Relay keeps only its public key.

• You add your first passkey shortly after signing in with X. Adding one, and saving or changing bank details, needs a recent X sign-in.
• Your passkey approves: adding or changing bank details, saving a withdrawal wallet address, and every withdrawal.
• Each approval is bound to exactly what you saw: the amount, the costs and the destination. A changed request needs a new approval.
• New bank details and new wallet addresses start with a short security hold before they can receive a withdrawal.

• Signing in with X again does not replace an existing passkey, so a stolen X session alone cannot take over withdrawals.
• If every passkey is lost, contact Relay (see Support). Recovery is started by Relay operations only after they verify evidence that the account is yours. It is never automatic and never based on a handle alone.
• Recovery removes the old passkeys and starts a visible security hold (usually three days). Withdrawals and bank changes are refused during the hold. When it ends, you sign in with X and add a new passkey.

• Someone holding both your X account and your passkey can act as you. Protect both.
• Relay operates the wallets that hold collected fees, so the safety of those funds also depends on Relay’s own systems (see Custody).