> For the complete documentation index, see [llms.txt](https://scarab.gitbook.io/scarab-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://scarab.gitbook.io/scarab-docs/resources/security.md).

# Security

Protecting our users is a top priority

## What are Passkeys?

Passkeys are comprised of two interconnected components: a public key shared with the intended website or app for authentication and a private key securely stored on your device. The encryption is designed to be irreversible, ensuring the utmost security and resilience against phishing attacks. 

Access to your passkey-protected accounts is impossible without possession of the passkeys and a method to authorize the storing device. This ensures that shared passkeys remain safeguarded, accessible only by those you explicitly trust.

## What about Private Keys?

Thanks to Turnkey's secure enclave technology, your generated wallet's private keys are NEVER exposed to Scarab's or our partner's servers. Private keys can only be viewed/exported by the owner, and are locked behind passkey authorization.