> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cesto.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Security & Self-Custody

> Non-custodial by design. You stay in control of your funds.

## Non-custodial by design

Cesto is non-custodial: you own your wallet and the assets in it, and Cesto never takes custody of your funds. There's no Cesto-held account, escrow, or vault standing between you and your money.

* **No custody risk.** Cesto can't move or spend your assets without your authorization.
* **No counterparty risk.** You're not handing your money to a third party to hold.
* **No lock-ups.** Your assets are always yours. Exit any position, any time.

## You're always in control

Every action on Cesto happens only when you authorize it. When you invest, rebalance, close a position, or withdraw, you approve that specific action, and Cesto carries it out exactly as you approved. You can withdraw your funds to any Solana wallet whenever you want.

<Note>
  **One option, by your choice: auto-rebalance.** If you switch on auto-rebalance for a basket, you pre-authorize Cesto to realign that position when the strategy updates, so you don't have to approve each update. It's off by default, and you can turn it off anytime. [Learn more](/cesto/rebalancing).
</Note>

## Best practices

<CardGroup cols={2}>
  <Card title="Secure your sign-in" icon="user-shield">
    Protect the account or wallet you use to access Cesto, and turn on two-factor authentication where you can.
  </Card>

  <Card title="Keep your credentials private" icon="key">
    Never share your wallet's seed phrase or private key. Cesto will never ask for it, and no legitimate service will.
  </Card>

  <Card title="Verify the URL" icon="globe">
    Always make sure you're on app.cesto.co before signing in or connecting a wallet.
  </Card>

  <Card title="Review before approving" icon="eye">
    Check the details of any action (amounts, assets, and destinations) before you approve it.
  </Card>
</CardGroup>