How PopaDex Encrypts Your Financial Data
What PopaDex encrypts in your browser, what the server processes, and how passwords and recovery affect protection.
PopaDex implements end-to-end encryption for all personally identifiable information (PII) that can be end-to-end encrypted in your private financial vault.
E2EE is enabled by default for new accounts. All PII that can be end-to-end encrypted is protected with E2EE. Necessary service information has separate protection, as explained below.
Your private information
Protected vault information includes account names, balances, financial-history amounts, interest settings and retained private bank details. Encryption and decryption happen under your control, using your vault’s encryption keys.
This protection applies to your private financial vault. Some older accounts predate automatic E2EE and need encryption enabled to receive this protection. Public tools and information you choose to share with other people or service providers have their own processing and sharing workflows.
Necessary service information
Some information must remain available to operate the service. Account email addresses support sign-in and communications. Bank connection credentials support bank synchronization. Routing, ownership and scheduling information keeps accounts and updates working correctly.
Required service information uses server-managed protection and appropriate access controls. It is separate from the private information protected by your vault’s E2EE.
Connected banks
Automatic bank sync is available only where the connected bank supports it. During sync, the provider and backend temporarily process the bank response. Retained private values are encrypted immediately using a key controlled by your E2EE vault.
Passwords and recovery
Your encryption recovery key is generated and displayed on your device. Keep it somewhere secure. We receive only encrypted key material and the information needed to support your vault; your encryption recovery secret stays with you.
Changing a login password does not reveal existing encrypted financial data. Restoring access requires the original encryption key or working recovery material.
Read how vault protection works for a short explanation of keys, service exceptions and recovery.