Security

Your money lives in your own Hyperliquid account, and only your wallet can move it. Your syntaka account controls what syntaka trades for you. Keep both safe.

You can sign in with your email and password, or with Google or X where they are offered.

Your email is confirmed. When you create an account, syntaka emails you a link. Your account opens once you confirm the address. If nothing arrives, look in spam, or check the address.
Choose a strong password that you don’t use anywhere else.

You can see and change your ways in under Your account.

Forgot your password

On the sign-in page, choose Forgot password?
Enter your email and choose Email me a link.
Open the link and choose a new password.

When your new password is set, every browser that was signed in is signed out. Sign in again with the new one.

An authenticator app (such as Google Authenticator, 1Password or Authy) shows a new six-digit code every few seconds. With it, someone who learns your password still can’t sign in.

To turn it on, open Your account, then Authenticator app, then Set up…:

Enter your password.
Scan the QR code with your authenticator app (or enter the key shown), then enter the code it shows.
Save your backup codes. Each one signs in once if you lose your phone, and they are not shown again. Use Copy or Download, then I saved them.

From then on, syntaka asks for a code at each sign-in with your password.

To turn the authenticator off, choose Turn off… and enter a code from it. syntaka emails you when it is turned off.

Sessions and devices

Under Your account, Sessions shows every browser and phone where you are signed in, how each signed in, and when it was last used.

Choose End next to one you don’t recognise to sign it out.
Choose Sign out everywhere to sign out every browser and phone, this one too.

When you sign in from a browser your account hasn’t used before, syntaka emails you “Was this you?”. If it wasn’t you, open the link and choose This wasn’t me: that browser is signed out of your account at once. Then change your password.

What syntaka never asks for

syntaka also never asks you to send it money. Deposits go from your wallet to your own Hyperliquid account.

What your wallet signs

When you turn on live trading, your wallet signs exactly two approvals:

syntaka’s trading key may place and cancel orders for 30 days. It can never withdraw or move money.
syntaka’s fee of 0.01% of each order (see fees).

Later, you may also sign the removal of the trading key, or a move of your own USDC from spot to perps. Read every request in your wallet before you sign. If your wallet shows something else, such as a withdrawal, a transfer to another address, or a token approval, don’t sign it.

Keeping your wallet safe

Keep your seed phrase offline, written down, and never share it.
Only connect your wallet on syntaka’s own site. Check the address in your browser before you sign.
Use a wallet you only use for trading, holding only what you plan to trade.
If you think your syntaka account is at risk, Revoke live trading in Your wallet. It destroys the trading key at once. Then sign out everywhere and change your password.
If you think your wallet is at risk, move your funds to a new wallet straight away. syntaka can’t do this for you.

The trading key

syntaka’s trading key for your account is made on syntaka’s server and kept encrypted. It is never shown to you, never sent to your browser, and never written to logs. It ends after 30 days unless you renew it, and it can’t withdraw your money even if it were stolen.

Your data

Under Your account you can Export my data (what syntaka keeps on you, as a file) or Delete my account.