Security & Stash

Learn more about how Stash keeps you safe, plus additional ways you can keep your Stash account secure.

Your protection is our priority.

From your investments to your cash, you can feel confident in the security of your money on Stash.

Your investments are held by our trusted partner and custodian Apex Clearing Corporation, a third-party SEC-registered broker-dealer and member FINRA/SIPC. Apex Clearing is a member of the Securities Investor Protection Corporation (SIPC). This means the investments in your account are protected up to $500,000 total (including $250,000 for claims for cash). For details, please visit www.sipc.org.

For uninvested funds, your Stash account is enrolled in the APEX FDIC-insured Sweep Program. Deposits to the Sweep Program are covered by FDIC insurance up to $250,000 limit per customer at each FDIC-insured bank that participates in the Sweep Program. Once your cash is deposited with the participating banks under the Sweep Program, such cash will no longer be covered by SIPC. Learn about the FDIC Sweep Program.

^{To note, SIPC coverage does not insure against the potential loss of market value. For details, please visit}^www.sipc.org^.

We promise to act
in your best interests

Stash is a registered investment advisor with the US Securities and Exchange Commission (SEC).

While such registration does not imply a certain level of skill, it does require us to follow federal regulations that protect you, the investor. By law, we must provide investment advice that is in the best interest of our clients

Stash works to keep your spending safe and secure.

Your Stash debit card is protected by the following security features and policies.^*

Zero liability policy.

If your card is lost or stolen, MasterCard’s Zero Liability Policy protects you from any unauthorized charges—whether made online or in person.^†

Continuous fraud monitoring.

MasterCard monitors activity on your debit card around the clock to help detect suspicious activity.

Debit card security.

Your debit card has an EMV chip to keep fraudsters at bay, plus a 3-digit security code to verify your identity for purchases.

Lock and unlock.

If misplaced, your debit card can be temporarily locked—and unlocked—with a tap in the Stash app.⁹

^{* These features apply to unauthorized transactions. MasterCard must be notified immediately of any unauthorized use. See}^{Deposit Account Agreement}^{for details.}

Learn more about security features.

256-bit encryption

We use encryption to protect and secure all of your information, from personal data (like your social security number) to your transaction history.

Transport Layer Security (TLS)

Our mobile and web applications use the latest Transport Layer Security protocol to protect your information when communicating with Stash.

Biometric recognition

You have the option to use biometric recognition (such as a fingerprint or facial scan) to access your account.

Access control

Stash uses session end-timers and log-in thresholds to prevent unauthorized access to your account. Stash also offers two-factor authentication to all active debit account customers for additional security.

Cutting-edge technology

We constantly monitor the latest security technologies to make sure that our systems are up to date and comply with industry best practices.

Stash security is PCI DSS compliant.

Stash handles sensitive financial customer data, so we’ve taken steps to secure critical systems and information. Stash has been audited by an external third party to validate compliance with the Payment Card Industry Data Security Standard (PCI DSS).

This standard evaluates all technical controls to ensure that card data is protected and secured from malicious attackers.

We encourage you to take these additional steps to secure your account.

Do not create passwords that can be easily guessed, such as your birthdate.
Do not use common names and/or numerical sequences as passwords. Examples include: pets, children, social security number, name, address, phone number, username, social media information, 1234, 1111, etc.
Do not share your passwords with anyone.
Avoid using the same password for multiple institutions/accounts/sites.
Always use strong passwords. The most secure passwords are long (12+ characters) and combine uppercase and lowercase letters, numbers, and special characters (!?#@).

Sign into your Stash account via stash.com or the Stash mobile application.
Only download our mobile application from the iOS App Store and Android Play Store
Do not click links or open attachments from unknown parties.
Be suspicious of emails from people or companies that are unfamiliar.
Avoid using public wifi or internet (hotels, cafes, etc.) to access your accounts
Look for the ‘https://’ and lock symbol to verify a website is secure.
To protect your Stash account, always log out after a session and close your browser.
Use two-factor authentication (also known as multi-factor authentication) if they are available to you.

We’re here if you
need us.

Please contact Stash if you suspect you are a victim of fraud, identity theft, or with any other questions or concerns. We’re always here to help.

Tel: (800) 205-5164

Monday - Friday | 8:00AM–8:00PM ET

You can also email us at [email protected] or write to us here. We’re available every day, 24/7.

Browse additional resources and frequently asked questions.

View all security FAQs

Stash follows the highest standards for data protection employed by financial firms and the financial services industry worldwide.

That includes using something called 256-bit encryption to secure your information, including personal data and fund purchase history. Stash further secures your account with Secure Socket Layer (SSL) technology, which ensures any information sent between the Stash App and its servers is protected.

What about Stash having access to my bank account?

Stash will never withdraw funds from your checking or savings account without your consent. In order to purchase any of the investments offered through Stash, you need to link a bank account to transfer funds and to make your desired fund purchase.

If you have more questions about whether it’s safe to link your bank account to Stash, send us an email. You can also read more about Stash’s security protocols here.

When you use Stash, your information is encrypted and stored on secure servers, and your funds and securities are held with your security in mind.

Your current investments are covered up to a maximum of $500,000 total, including $250,000 in cash balances through the Securities Investors Protection Corporation (SIPC). But SIPC coverage does not insure against the potential loss of market value. For uninvested funds, your Stash account is enrolled in something called the Apex FDIC-insured Sweep Program. And here are the details:

Stash accounts are enrolled in an interest-bearing Federal Deposit Insurance Corporation (FDIC) insured Sweep Program (“Sweep Program”) offered through our clearing firm, Apex Clearing Corp. Uninvested Cash in your Stash account will automatically be transferred into the Sweep Program and will earn interest based on the amount and duration of deposits and applicable interest rates. Deposits to the Sweep Program are covered by FDIC insurance up to the $250,000 limit per customer at each FDIC-insured bank that participates in the Sweep Program.

Once your cash balances are deposited with the participating banks under the Sweep Program, they will no longer be covered by SIPC.

Please ensure that you read the Terms and Conditions of the Sweep Program carefully. As with all investments, you should consider carefully if the Sweep Program meets your investment objectives.

What are some additional resources I can use?

Department of Homeland Security

Additional information and tips on cyber security.

Learn more →

Internet Crime Reporting Center:

How to file an internet crime complaint with the FBI.

Learn more →

Federal Trade Commission

More information about internet security, identity theft, and scams.

Learn more →

FTC (Password Strength)

Additional information on the importance of password strength.

Learn more

FCC (Protecting Mobile Devices)

Learn more about how you can protect your mobile device.

Learn more

Free Credit Report

Go here for a free annual credit report.

Learn more

Security & Stash

Your protection is our priority.

How we protect your investments:

How we protect your bank account:

We promise to act
in your best interests

Stash works to keep your spending safe and secure.

Zero liability policy.

Continuous fraud monitoring.

Debit card security.

Lock and unlock.

Learn more about security features.

256-bit encryption

Transport Layer Security (TLS)

Biometric recognition

Access control

Cutting-edge technology

Stash security is PCI DSS compliant.

We encourage you to take these additional steps to secure your account.

How to improve your password security:

How to practice web safety:

How to protect your equipment:

We’re here if you
need us.

Browse additional resources and frequently asked questions.

Is it safe to link my bank account to Stash?

Is my personal information secure?

Is Stash regulated?

Is my money safe?

Why does Stash need my social security number?

How does Stash use my personal information?

What are some additional resources I can use?

Department of Homeland Security

Internet Crime Reporting Center:

Federal Trade Commission

FTC (Password Strength)

FCC (Protecting Mobile Devices)

Free Credit Report

Security & Stash

Your protection is our priority.

How we protect your investments:

How we protect your bank account:

We promise to actin your best interests

Stash works to keep your spending safe and secure.

Zero liability policy.

Continuous fraud monitoring.

Debit card security.

Lock and unlock.

Learn more about security features.

256-bit encryption

Transport Layer Security (TLS)

Biometric recognition

Access control

Cutting-edge technology

Stash security is PCI DSS compliant.

We encourage you to take these additional steps to secure your account.

How to improve your password security:

How to practice web safety:

How to protect your equipment:

We’re here if youneed us.

Browse additional resources and frequently asked questions.

Is it safe to link my bank account to Stash?

Is my personal information secure?

Is Stash regulated?

Is my money safe?

Why does Stash need my social security number?

How does Stash use my personal information?

What are some additional resources I can use?

Department of Homeland Security

Internet Crime Reporting Center:

Federal Trade Commission

FTC (Password Strength)

FCC (Protecting Mobile Devices)

Free Credit Report

We promise to act
in your best interests

We’re here if you
need us.