Your trust is Wealthfront\u2019s top priority, and we work around the clock\u2014with internal teams and external partners\u2014and strictly adhere to the rules set by our regulators to ensure the security of your accounts and the privacy of your data.\u00a0<\/p>\n\n\n\n
At a glance:<\/p>\n\n\n\n
Read on for more details, plus some tips on additional measures you can take to further protect your online security.\u00a0<\/p>\n\n\n\n
The FDIC insures cash deposits at banks to protect customers\u2019 money in the event that a bank goes out of business. Wealthfront isn\u2019t a bank, but we work with partner banks so we can make sure you\u2019re covered by FDIC insurance. Generally, you can receive up to $250,000 in coverage for a given account at any given bank. At Wealthfront, we help you get more coverage.<\/strong> When you deposit money to a Wealthfront Cash Account, we send those deposits to multiple program banks so you get up to $8 million of FDIC insurance for your cash deposits ($16 million for joint accounts).<\/p>\n\n\n\n When you invest with Wealthfront, your investments are protected by up to $500,000 of SIPC coverage<\/strong>, $250,000 of which can be in cash. SIPC oversees the liquidation of firms that close when the firm is bankrupt or in financial trouble, and customer assets are missing.<\/p>\n\n\n\n There are two things to know about SIPC coverage:<\/p>\n\n\n\n It\u2019s worth noting that SIPC coverage also applies to money in transit at Wealthfront, including Cash Account deposits that are en route to a program bank.\u00a0<\/p>\n\n\n\n Our systems look for unusual behavior related to transactions and linked accounts, and automatically escalate it to our team for human review when necessary. We have trained experts on staff who specialize in the prevention of financial crimes and money laundering.<\/p>\n\n\n\n Two-factor authentication helps protect your account by requiring two methods of verification when you log in. We require this for Wealthfront accounts.\u00a0<\/p>\n\n\n\n For our employees, we take this a step further. We require employees to use phishing-resistant factors for authentication for all systems that support it.\u00a0<\/p>\n\n\n\n We know many clients want to link their Wealthfront accounts to external services like TurboTax, YNAB, and Monarch. However, if you use two-factor verification with Wealthfront, then you can\u2019t use your Wealthfront credentials for this. App-specific passwords let you securely link to Wealthfront without using your Wealthfront password so the linked application has read-only access.<\/strong><\/p>\n\n\n\n Wealthfront uses industry-standard cryptographic protocols to encrypt all client data. This includes document uploads, personally identifiable information, and sensitive information like your password.\u00a0<\/p>\n\n\n\n This dark-web scanning helps ensure that if employee passwords or emails are compromised, we know about it and can act quickly. We also conduct regular employee phishing exercises to help prevent employee credentials becoming compromised in the first place, and hold annual employee security training.<\/p>\n\n\n\n We follow the principle of least privilege<\/a>. This means we only grant employees access and permissions to systems that are absolutely necessary. This helps minimize the potential for an attacker to gain access to information they shouldn\u2019t have.<\/p>\n\n\n\n We also limit the data available to third-party applications like marketing platforms for the same reason, and only share the bare minimum required. In the event that we do share client data with a vendor, it is anonymized whenever possible. Vendors with client data are regularly reviewed by our third-party risk management committee, and we also review their security audit reports on a regular basis.\u00a0<\/p>\n\n\n\n Our internal team evaluates risks across our company and platform and institutes solutions when gaps are identified. They actively monitor security resources and review vendor security notifications for newly discovered vulnerabilities. We also work with external security firms to complement our internal security program. These relationships help us incorporate the latest in industry best practices. On top of that, a large, big-four accounting firm conducts an annual audit of our policies, processes, and procedures related to changes, privileged access, and our broker-dealer operations.<\/p>\n\n\n\n The ISO 27001:2022 certification is a set of requirements for information security management systems that is broadly respected within the industry. This certification requires a wide range of robust security practices, including detailed business continuity planning, granular access control protocols, and a comprehensive incident management framework designed to protect our users\u2019 assets.<\/p>\n\n\n\n Your data belongs to you, so our approach to it is simple: We don\u2019t rent, sell, or trade it. You can read more details in our privacy policy<\/a>.\u00a0<\/p>\n\n\n\n We think it\u2019s smart to take an active role in protecting your accounts and data, too\u2014not just at Wealthfront, but everywhere. Here are some tips for maintaining good online security in general.<\/p>\n\n\n\nYour investments at Wealthfront are protected by SIPC coverage<\/h3>\n\n\n\n
\n
How Wealthfront protects you from fraud<\/h2>\n\n\n\n
We monitor for unusual account activity across all of your accounts<\/h3>\n\n\n\n
There are additional fraud-prevention features available for the Cash Account<\/h3>\n\n\n\n
\n
How Wealthfront protects your security<\/strong><\/h2>\n\n\n\n
We require two-factor authentication<\/h3>\n\n\n\n
We enable app-specific passwords<\/h3>\n\n\n\n
We encrypt your information<\/h3>\n\n\n\n
We conduct dark-web scanning for employee credentials<\/h3>\n\n\n\n
We follow best practices for least privilege<\/h3>\n\n\n\n
We have an internal security team and<\/em> engage external firms to test and validate our controls<\/h3>\n\n\n\n
We are ISO 27001:2022-certified<\/h3>\n\n\n\n
How Wealthfront\u2019s privacy policy protects your data<\/h2>\n\n\n\n
We don\u2019t rent, sell, or trade your personal information to anyone for any reason<\/h3>\n\n\n\n
What you can do to further protect yourself<\/h2>\n\n\n\n