Security
Two-factor, passkeys, biometric unlock, and what to do when you are locked out.
Updated
Two-Factor Authentication
Two-factor authentication adds a second step beyond your password: signing in needs a one-time code from an authenticator app on your phone.
- Go to Settings → Security.
- Find the Authenticator App row and tap Setup.
- Scan the QR code with your authenticator app - Google Authenticator, Authy, 1Password or similar.
- Enter the six-digit code from the app to confirm.
Save your recovery codes somewhere you can actually reach
You get ten, each usable once. If you lose your authenticator and your codes are only in a note on the same phone, you have lost both. A password manager or a printed copy is the point.
Using a Recovery Code
On the code screen, choose to use a recovery code instead and enter one of your ten.
Signing in with a recovery code turns two-factor authentication off
A recovery code means you have lost your authenticator, so Cadence removes the old one rather than leaving you locked out of an account that keeps asking for codes you cannot produce. You will see a notice saying so when you land in the app.
Set 2FA up again from Settings → Security as soon as you are back in. That enrols a fresh authenticator and issues a new set of recovery codes; the old codes stop working.
Recovery-code attempts are limited to three an hour, which is another reason to keep the codes somewhere you can get at them quickly.
Passkeys
Passkeys let you sign in without a password, using your device’s Face ID, Touch ID or screen lock instead. Add one from the Passkeys row under Settings → Security, on the web or in the iOS app.
A passkey is tied to your device and cannot be phished or reused, making it both faster and more secure than a password. You can keep your password and authenticator app as backups.
Biometric Unlock on Mobile
Separately from signing in, the mobile apps can require Face ID, Touch ID or a fingerprint whenever the app returns from the background. Turn it on under Settings → Security in the app. See Mobile App.
It is worth enabling even if you stay signed in: it is the difference between someone with your unlocked phone seeing your finances and seeing nothing.
Changing Your Password
- Go to Settings → Security.
- Tap Change Password.
- Enter your current password to verify.
- Enter and confirm your new one.
Choose something strong and unique to Cadence. A password manager can generate and store it for you.
If You Forget Your Password
Tap Forgot Password on the sign-in screen and Cadence sends a reset link to your registered email. The link expires after a short time.
This works from the mobile apps as well as the web, so a forgotten password is not a reason to go find a computer.
How Your Data Is Protected
- Encryption in transit and at rest.
- Your bank credentials are never stored by Cadence. Connections are handled through Plaid, and what Cadence holds is a read-only token.
- Cadence is online-only and keeps no financial data on your device.
- Your data is never sold, never used to train AI models, and never shared with third parties for advertising.
More on connections in Synced Accounts, and on exports and deletion in Privacy & Data Management.