Wallets & security
Separate wallets, scoped permissions, and assets you can see on Solana.
Your wallets
people.fun uses Turnkey-powered wallets. Your main wallet holds your available USDC. Each creator position uses a separate portfolio wallet that holds its own assets on Solana.
This is not a pooled onchain vault. You do not deposit into a shared pool or receive vault shares. Your position is a set of assets in your dedicated wallet, separate from other users’ assets.
What you authorize
You control the account through your sign-in credentials. Funding a portfolio from your main wallet and withdrawing from your main wallet require authorization through your session.
For automation, onboarding installs scoped Turnkey execution permissions. These allow the system to perform supported trades in your portfolio wallets and return proceeds to your main wallet. They do not grant unrestricted access to spend from your main wallet or send portfolio funds to arbitrary destinations.
Private keys are protected by Turnkey’s signing infrastructure. They are not stored in the people.fun application database. Signing still depends on the configured permissions and the Turnkey service.
What Auto trade changes
Auto trade on lets the system follow new creator compositions for that position. Auto trade off pauses those automatic updates, leaving your assets in place. You can still sell or request a manual composition update.
The switch changes whether automation runs. It does not revoke and recreate your Turnkey permissions each time.
What “onchain” means here
Funding, swaps, and withdrawals settle on Solana. Your wallets and token balances can be inspected in a Solana explorer. The AI’s interpretation of content and the decision to change a target happen offchain; the resulting asset transfers happen onchain.
Supported assets include native crypto tokens and tokenized versions of other markets. A tokenized asset also depends on its issuer, redemption terms, trading availability, and liquidity.
Keep in mind
Wallet separation and scoped signing reduce the reach of delegated access, but they do not remove market, software, or service risk. AI can misinterpret a post; a token can lose liquidity; a network or signing provider can be unavailable; and a swap can fail.
Protect the Google or X account you use to sign in. Review the creator’s evidence and holdings before investing, and only send supported USDC on Solana to your deposit address.
Read more about Turnkey’s security model and Solana.