Account & security
Wallet PIN basics
What your wallet PIN actually does in Kit Pay, when the app asks for it, and what it can and cannot protect.
Your wallet PIN is not a login password. It is the approval you give when money or other sensitive things are at stake, and understanding that difference makes the app's behaviour predictable instead of mysterious.
When Kit Pay asks for it
The app asks you to approve sensitive money actions at the moment you take them — sending a transfer, approving a payment request, setting up a payment plan. Each approval is tied to what you are doing: it authorises that action, with those details, and nothing else. You approve with your wallet PIN or, on supported phones, with enrolled device security such as fingerprint or face unlock.
This is why the app may feel insistent: unlocking your phone, or even opening Kit Pay, is never treated as permission to spend. Permission to spend is given per action, on purpose.
What the PIN protects
- A snatched, unlocked phone: the thief holds the app but still faces the approval step on money actions.
- A borrowed phone: a friend or child using your handset still faces the approval step before money moves.
- A rushed moment: the approval screen is one last chance to see the amount and recipient before anything moves.
What it cannot protect
The PIN cannot protect you from yourself under pressure. If a scammer talks you into approving a payment, the approval is real and the transfer is real — the system did what you told it. And it cannot protect a secret you gave away: anyone who knows your PIN and holds your phone can act as you. That is the deal, so the PIN stays in one place only: your head.
Worried the PIN is exposed? Change it now — it takes a moment. Forgotten it entirely? Here is what to expect.
Frequently asked questions
Is the wallet PIN the same as my phone unlock code?
No, and it should never share digits with it. Phone unlock opens the handset; the wallet PIN approves sensitive actions inside Kit Pay.
Why does the app ask me again for something I already approved?
Approvals are bound to a specific action. A new action — even a similar one — is new permission, asked for fresh.