> For the complete documentation index, see [llms.txt](https://secur3.gitbook.io/secur3/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://secur3.gitbook.io/secur3/everything-secur3-faqs/how-does-secur3-work.md).

# How Does SECUR3 Work?

On top of your private key, you will set another password when creating your own SECUR3 Vault. 

{% hint style="success" %}
To access the funds inside your dedicated SECUR3 vault, you'll need both the correct private key (non-custodial wallet login on Metamask) and 2FA password (SECUR3 Vault).
{% endhint %}

While creating your SECUR3 Vault, it also required for you to provide a backup wallet address (which can not be changed). 

In case the private key of your primary wallet gets compromised, funds locked in SECUR3 Vault are safe as long as you don’t withdraw them back. The moment you withdraw them back to the wallet, the hacker can front-run transactions or immediately transfer them to the hacker wallet thereby involving huge risk of getting funds drained immediately. To avoid this situation, there is a backup wallet configured in the beginning which can be used to take custody of assets in these situations. 

{% hint style="info" %}
It is advised to keep your backup wallet as cold wallet or hard ledger wallet.
{% endhint %}

Here is a matrix showing the safety of your funds with SECUR3 in different scenarios: 

<table><thead><tr><th width="302.3333333333333" align="center">Event</th><th align="center">Your Wallet</th><th align="center">SECUR3 </th></tr></thead><tbody><tr><td align="center">Level of Decentralisation</td><td align="center">Your Keys, Your Funds</td><td align="center">Your Keys, Your 2FA, Your Funds</td></tr><tr><td align="center">Private Key Compromised </td><td align="center">Funds Lost</td><td align="center"> Funds Safe</td></tr><tr><td align="center">Malicious Contract Approval</td><td align="center">Funds Lost</td><td align="center">Funds Safe</td></tr><tr><td align="center">Phishing Link/ Website Clicked</td><td align="center">Funds Lost</td><td align="center">Funds Safe</td></tr><tr><td align="center">SECUR3 2FA Password Lost</td><td align="center">Funds Safe</td><td align="center">Funds Safe</td></tr><tr><td align="center">Computer Compromised</td><td align="center">Funds Lost</td><td align="center">Funds Safe</td></tr><tr><td align="center">Private Key and Secru3 2FA Password Leaked</td><td align="center">Funds Lost</td><td align="center">Funds Lost</td></tr></tbody></table>

In nutshell, in the event of private key compromise or wrong contract approvals given, your assets inside the SECUR3 Vault are still safe as long as your SECUR3 2FA Password is not compromised.