Security

How Sandwich is keeping your data secure.

Someone from Sandwich is asking for my personal details. Is this legitimate?

To keep your data safe, never share your personal details or account access details.

How to prevent Phishing attacks and other scams

The best defense is awareness and knowing what to look for.

Where is Sandwich installed?

By default Sandwich will install to your local app data directory.

Why is my antivirus marking Sandwich as unsafe?

Applications can experience false positives on antivirus software for various reasons.

How private is my API information?

Sandwich takes API key security seriously and provides several measures to enhance the security of user API keys.

How does Sandwich approach API Key Security?

Sandwich takes API key security seriously and provides several measures to enhance the security of user API keys.

Can I lock my API keys to my IP address?

Yes, you can!

Why should I be using a VPN?

A VPN protects its users by encrypting their data and masking their IP address, leaving their browsing history and location untraceable.

Why do I need to set up a 2FA?

Sandwich mandates the use of 2FA (Two-Factor Authentication) for enhanced security, and it cannot be disabled.

Why do I have to reload my accounts every time I open the app?

Your API key file is encrypted and tied to your computer, ensuring that your account access remains private. Therefore, your accounts can only be validated and loaded once you log in to Sandwich with your 2FA (Two-Factor Authentication).

What is 2FA (two-factor authentication)?

Two-factor authentication (2FA) is a security system that requires two separate, distinct forms of identification in order to access something.

Why did my YubiKey stop working?

There are simple steps to follow to troubleshoot your Yubikey.

What 2FA options does Sandwich support?

Sandwich offers support for two popular 2FA methods: Google Authenticator and YubiKey.

My Google Authenticator code is giving an error. What can I do?

The accuracy of the code is time-sensitive. If there is a time difference between your devices, it can cause the code to become invalid.

I lost my 2FA device: what do I do?

If you do not have access to your current OTP device please email us on support@sandwichtrading.com

How do I delete my Sandwich account?

By uninstalling the app, the majority of your user data will be immediately removed since Sandwich does not store personal information. Contact Support for more assistance.

How to Set Up Your YubiKey Authentication

Setting up your 2FA is part of the account registration process. Choose YubiKey as your authenticator by clicking Setup OTP, then YubiKey and following the prompts on screen to validated your device and link your Sandwich account.

Does Sandwich store my personal information? Where is Sandwich data stored?

At Sandwich we value your privacy. We never collect or store your personal information, including the details of your trades.

How can I ensure my API key file is secure?

You can password protect your API keys and lock them to your PC.

Does Sandwich have multi-factor authentication?

Sandwich offers support for two popular 2FA methods: Google Authenticator and YubiKey.

Do I need to log on to an exchange to use Sandwich?

Only to create and manage your API keys.

Can I use the same YubiKey to authenticate different accounts on Sandwich?

Yes, YubiKey can authenticate multiple accounts.

Can I turn off my 2FA?

Sandwich mandates the use of 2FA (Two-Factor Authentication) for enhanced security, and it cannot be disabled.

How do I reset my OTP for Sandwich login?

A reset option is available in the User drop-down menu or on your Profile icon.