Security

You're trusting us with a picture of your household's finances. Here's how we protect it — and, just as importantly, what we deliberately never touch.

We never connect to your bank

Net Worth Snapshot has no link to your financial institutions. You enter your balances by hand. That means we never ask for, receive, or store bank usernames, passwords, account numbers, or any credential that could be used to move your money. The most sensitive thing we hold is a number you typed in yourself.

Passwordless login

There is no password on your account, so there's no password to be guessed, reused, or leaked in someone else's breach. When you sign in, we email a one-time code that works once and expires. Access to your account is tied to access to your email inbox.

Passkeys

You can add a passkey and sign in with a fingerprint, face, or device PIN instead of waiting for a code. A passkey never leaves your device — we only store its public half, which is useless to anyone who steals it — and it only works on this site, so it can't be phished by a lookalike page.

A passkey is an alternative to the emailed code, not an extra step in front of it: the code keeps working exactly as it does now, on every device, so a lost or replaced phone never locks you out. That also means your account is only as protected as your email inbox, whether or not you add a passkey — keep that inbox secured.

Encrypted connections

Every connection to Net Worth Snapshot uses HTTPS (TLS), so your data is encrypted in transit between your device and our servers. In production, session and security cookies are flagged secure and are only ever sent over HTTPS.

Protection against common web attacks

Data at rest

Your account and balance data is stored in an encrypted database on servers we control. We keep only what the app needs to show you your net worth history.

We don't sell or share your data

We do not sell, rent, or trade your information, and we don't run advertising. We share data only with the service providers strictly needed to operate the app (such as our hosting and email-delivery providers), and only under agreements that bar them from using it for their own purposes. See our Privacy Policy for the full picture.

You stay in control

You can export your data at any time, and you can delete your account yourself from your household settings whenever you choose. Deleting your account immediately and permanently removes your account and its financial data; any residual copies in encrypted backups and server logs are purged within 60 days.

Reporting a vulnerability

No system is perfectly secure, and we take reports seriously. If you believe you've found a security issue, please email security@networthsnapshot.com so we can investigate and respond. We ask that you give us a reasonable chance to address the issue before disclosing it publicly. We're a small, independent team and don't run a paid bug-bounty program, so we aren't able to offer monetary rewards.