Security

NRGPay is built as a separate system from the EZNRG platform, so that the part that handles money has its own sign-in, its own database and its own rules.

How NRGPay is designed

• Multi-factor sign-in. A password alone is never enough. Every sign-in needs a code from your authenticator app.
• Fresh confirmation for sensitive actions. Linking a bank account, creating a wallet, approving a transfer and managing access tokens each require a recent authenticator code.
• You approve every movement. Connected apps and assistants can request a transfer. Only you can approve it, signed in to NRGPay.
• Limited access tokens. Tokens for apps are scoped to specific permissions, can be revoked at any time, and can never perform sensitive actions.
• No bank passwords, no wallet keys. NRGPay is designed so that bank sign-in happens with a bank-data provider and wallet keys are held by a custody provider, not stored by us.
• A permanent record. Balances are kept in a ledger that cannot be edited after the fact, and sensitive actions are logged.

Reporting a security issue

If you believe you have found a vulnerability, write to support@nrgpay.io. Please do not test against accounts that are not yours.

nrgpay.io is a wholly owned subsidiary of EZNRG AI, INC.