Protecting your PIN (and what happens if you don't)

Every transaction on Aurra ends the same way: your 6-digit PIN. It authorises transfers, freezes, withdrawals and account changes. That also makes it the one thing worth protecting carefully.

How Aurra handles your PIN

• Your PIN is hashed with bcrypt before it is stored. We cannot read it, and nobody at Aurra can look it up.
• Five consecutive wrong entries lock the account for 24 hours. The lock cannot be overridden on demand.
• Sensitive operations are logged in an audit trail.
• New device or location sign-ins trigger a security alert on WhatsApp.

Habits that keep you safe

• Don't reuse the PIN from your banking app or ATM.
• Don't let anyone watch you type it, including friends and family.
• If you suspect someone saw it, change it in Settings immediately.
• If you ever get locked out, use the forgot PIN flow on the dashboard, which verifies you by email OTP.

If something feels wrong

Type freezein the WhatsApp chat to block all transactions instantly, or freeze from Settings on the dashboard (you'll need your PIN to unfreeze). Then email admin@aurra.online with what you saw. Freezing is always faster than explaining later.