In crypto, security isn't optional - it's everything. Ecency Mobile is built with a security-first architecture that keeps your private keys safe while making transactions seamless.
Ecency supports multiple authentication methods:
Private Key Login - import your posting or active key directly. Keys are AES-encrypted and stored locally on your device. They never leave your phone and are never sent to any server.
HiveSigner - OAuth2-based authentication. Your keys stay with the HiveSigner service, and Ecency receives only an access token. Great for users who prefer not to enter keys directly.
HiveAuth/Keychain - keychain-based authentication. Sign transactions using the HiveAuth companion app via QR code. Your keys never touch Ecency at all.
Every sensitive operation requires PIN verification:
Set a custom PIN during account setup
Biometric authentication (fingerprint or Face ID) available as an alternative
PIN is cached briefly for convenience.
Hive has different key levels (posting, active, owner, memo), and different operations require different keys. Ecency handles this intelligently:
Posting key operations (voting, commenting) proceed silently
Active key operations (transfers, staking) trigger an Auth Upgrade Sheet if you only logged in with a posting key - you enter your active key once, and signing happens instantly
The app never asks for more authority than needed
This is a powerful feature for interoperability. Ecency can handle Hive URI protocol links:
hive://sign/... - standard Hive URI transactions
ecency://sign/... - Ecency's equivalent, automatically normalized to the Hive URI format
When you click a hive:// link from any app, website, or QR code, Ecency:
Parses the operation (transfer, delegation, custom_json, etc.)
Validates the transaction - checks operation format, amount formatting, and authority requirements
Shows you exactly what you're signing before confirmation
Signs and broadcasts using your stored key, HiveSigner, or HiveAuth - whichever you set up
Calls back to the requesting app with the transaction result (supports callback URLs and request_id correlation)
This means third-party dApps, games, and services can request transactions through Ecency without ever touching your keys. You review, you approve, Ecency signs.
Exploring other Hive dapps never been easy, you can navigate to any Hive based dapp or website from Ecency app and login, sign transactions while keeping your keys secure on Ecency. You like playing games Splinterlands or others, no problem go to Explore, type in url or open web dapp from bookmarks and login selecting Keychain or Keeper or Vault extensions, Ecency app will auto detect and log you in to dapp. Any hive dapp integrated either of these browser extension logins for desktop browsers automatically get benefit and open their doors to Ecency mobile app users as well.
Beyond transaction signing, Ecency handles:
ecency://transfer - pre-filled transfer requests (HIVE, HBD, or Points) from external apps, with callback support
ecency://login - securely share your posting key with trusted third-party apps (with explicit user confirmation)
ecency://auth - passwordless authentication with access tokens
Before executing any transfer, Ecency checks the recipient against a maintained list of known scam accounts and warns you before sending funds to a flagged address.
Ecency never compromises: maximum security with keys that stay on your device, smart authority handling that only asks for what's needed, and URI-based hot signing that lets you interact with the entire Hive ecosystem from one app.
