PLAYS
Connect
SPY+0.56%QQQ+0.57%BTC+0.12%ETH+0.24%XAU-0.10%ANTHROPIC-0.05%OPENAI+0.23%NVDA+1.51%HYPE+3.53%AAPL-0.10%SOL-0.91%XAG+1.00%SNDK-0.55%GOOGL+0.73%AMD-0.13%MSFT+1.42%AMZN+0.44%LIT+5.97%SPY+0.56%QQQ+0.57%BTC+0.12%ETH+0.24%XAU-0.10%ANTHROPIC-0.05%OPENAI+0.23%NVDA+1.51%HYPE+3.53%AAPL-0.10%SOL-0.91%XAG+1.00%SNDK-0.55%GOOGL+0.73%AMD-0.13%MSFT+1.42%AMZN+0.44%LIT+5.97%
AccountLIVE

Account security

Where keys live and what PLAYS can and cannot do.

  • The trading key is generated and kept inside a worker in your browser. The page can ask it to sign but can never read it.
  • At rest it is encrypted with a non-extractable key stored in your browser.
  • The signer is the official Lighter signer, built from a pinned source commit. The page checks its SHA-256 before running it and refuses anything else.
  • Signed orders go from your browser directly to Lighter. PLAYS servers never receive a key or a signed transaction.
  • Every order needs your explicit confirmation. There is no background trading.
Anything running in your browser on this site could ask the signer to sign. That is why each order is also gated by a typed confirmation and why the key can only trade, not move funds elsewhere.