# Security: Action when account is compromised **URL:** \ **Category:** Help\ **Tags:** Sync, Security-and-Privacy\ **Created:** [August 10, 2024, 9:01am UTC](https://community.anytype.io/t/security-action-when-account-is-compromised/23281 "2024-08-10T09:01:19Z")\ **Posts on this page:** 1\ **Showing post:** 8
**Author:** ![Angelo](https://community.anytype.io/user_avatar/community.anytype.io/angelo/32/9996_2.png) [@Angelo](https://community.anytype.io/u/Angelo)\ **Post date:** [August 13, 2024, 4:14pm UTC](https://community.anytype.io/t/security-action-when-account-is-compromised/23281/8 "2024-08-13T16:14:22Z")
Due to the risk of email being an attack vector, we have no means of verifying the true owner of a Vault even for paying members, since a hacker could be impersonating you. At the end of the day, the responsibility for safeguarding your Vault ultimately lies with the owner, which goes hand-in-hand with personal data ownership. Subscriptions, Vaults, and any.names can’t be transferred between each other, as they’re irrevocably linked to the trust network until they expire. While this isn’t a perfect solution, we currently offer to cancel, and refund your subscription in proportion to the duration it’s been used. In addition to that, you should export your Spaces, and after confirming they’ve been successfully imported into a new Vault, use the option in settings to start the Vault deletion process. We’re actively researching potential solutions for this predicament, but it would require a revolutionary degree of innovation on our part, as other applications with similar principles face the same challenge. [Seed phrases](https://www.coinbase.com/en-de/learn/wallet/what-is-a-seed-phrase) are keeping a trillion-dollar crypto market secure and have been crucial for building trust in that world, so once again, it’s imperative to keep yours safe and secure. We’ve also considered introducing an opt-in 2FA feature for those comfortable with such an option. Here are some request for that: > [@2-factor-authentication (2FA or MFA)](https://community.anytype.io/t/2-factor-authentication-2fa-or-mfa/2764): > > I’m a bit concerned about security by only having the keychain-phrase as security for my account with all the private notes. Once somebody saw my phrase or the QR-code the other person would have access to everything. Especially if Anytype will become an “Operating System”. Therefore I would like to have the possibility to add a second layer of security with TOTP or/and FIDO2. I think that this is a must-have-feature. And till this is implemented some sort of notification would be nice to get … > [@Biometrics or Pin to Lock Mobile App](https://community.anytype.io/t/biometrics-or-pin-to-lock-mobile-app/6707): > > Is your feature request related to a problem? Please describe. We can protect the content stored in Anytype with a pin on the Desktop. It would be great to see similar protection for our content on the devices that are more prone to be lost or stolen: mobile devices. Describe the solution you’d like Three options: Don’t lock (for those who have nothing to hide wink ) Lock with pin Lock with biometics if available on the device (with pin as backup) Describe alternatives you’ve considered … There are many softwares available that place less emphasis on personal data ownership, local-first principles, and (E2E P2P) security. --- _[View the full topic](https://community.anytype.io/t/security-action-when-account-is-compromised/23281)._