Help

Security & Plaid

In general

Merum can view your accounts and can never move your money. You connect a bank or brokerage through Plaid, an industry-leading platform for linking to financial institutions. The connection Plaid gives Merum is read-only.

In plain terms, Merum never sees your bank password or your full account numbers, and it can never move money. Plaid sets up a view-only connection: Merum can look at your accounts and can never change anything in them. Plaid sends the last 4 digits of your accounts to help identify them.

Your data is encrypted in transit with TLS 1.2 or better, and at rest on Merum's servers with AES-256. Every sign-in to Merum asks for a code from an authenticator app, on top of your password or Sign in with Apple. Merum locks whenever you leave it and opens again with Face ID. The lock cannot be turned off.

Never give your bank password or a sign-in code to anyone who says they are from Merum. We will never ask for either.

What do I paste to add a wallet?

In general

An address

One receiving address. Find it under Receive in any wallet.

An extended public key

One key that lets Merum see every address in an account, without being able to spend. It starts with xpub, ypub or zpub.

A descriptor

A line of text that describes a wallet, including one that needs several keys. It starts with wpkh(, wsh( or similar.

In your wallet app

Sparrow

Settings › the account's Keystore › copy the xpub

For a descriptor: Settings › Export › Output Descriptor

Ledger Wallet

Account › the wrench icon › Advanced › copy the xpub

Trezor Suite

Account › Details › Show public key

Unchained

The vault › Vault tools › View the wallet configuration file › download it, then use Import a file

Never paste

A seed phrase, a private key, an extended private key (xprv), a wallet backup or a transaction. Merum refuses them.