​
PayMe Wallet Security

Wallet Security adds a second approval layer to changes that affect where future PayMe payments are sent. Your X account identifies the PayMe profile. Your current receiving wallet proves that the person enabling Wallet Security still controls the existing destination. A standard Authenticator app or a saved recovery code then protects future wallet changes.
Wallet Security does not move funds, send a transaction, reveal a seed phrase, or give Hilt signing authority. A receiving-wallet change affects future PayMe payments only.

​
What it protects

Without Wallet Security, access to the verified X account is not enough to replace the receiving wallet. Once protection is enabled, a wallet change requires:
  • access to the PayMe profile
  • a current six-digit Authenticator code or one unused recovery code
  • a signature from the new receiving wallet
This keeps payment destination changes separate from ordinary sending. Payers still open a PayMe link, connect the wallet they choose, and approve their own payment. They do not need a PayMe account.

​
Before you start

You need:
  • an active PayMe link
  • access to the wallet that currently receives payments
  • a standard TOTP Authenticator app
  • a safe place to store the recovery codes shown at the end
Open pay.hilt.so/me, sign in with the X account that owns the PayMe link, and choose Wallet Security.

​
Set up Authenticator protection

  1. Connect the current receiving wallet. Choose the wallet already shown on the security page. Hilt checks that it matches the active PayMe destination.
  2. Start Authenticator setup. Hilt creates a short-lived, one-time wallet approval.
  3. Approve with the current wallet. Sign the security message. This is a message signature, not a payment transaction.
  4. Add PayMe to your Authenticator app. Scan the QR code or enter the manual setup key.
  5. Enter the six-digit code. Use the current code from the Authenticator app to finish enrollment.
  6. Save every recovery code. Each recovery code can be used once if the Authenticator app is unavailable. Hilt does not show these codes again.
Do not store the Authenticator secret and recovery codes in a public note, shared chat, screenshot library, or the same unprotected account that controls the PayMe profile.

​
Approve from another wallet browser

If the current receiving wallet is on another device or in a wallet browser, choose Copy link for another wallet browser. Open that short-lived link in the current receiving wallet’s browser and sign the one-time security message. Return to the original PayMe security page afterward. It detects the approval and reveals the Authenticator setup automatically. The approval link expires and cannot be used to change the receiving wallet. It authorizes only the pending Authenticator enrollment.

​
Change the receiving wallet

After Wallet Security is enabled:
  1. Open pay.hilt.so/me/security from the PayMe account.
  2. Enter a current six-digit Authenticator code or one unused recovery code.
  3. Continue to the new wallet step.
  4. Connect the new receiving wallet.
  5. Sign the wallet-binding message with the new wallet.
  6. Confirm the change in the authenticated PayMe browser.
Future PayMe payments then use the newly verified wallet. Completed payments remain where they settled and are not moved.

​
Recovery scenarios

​
Security boundaries

  • An X account on its own cannot enable Authenticator protection without approval from the current receiving wallet.
  • Control of the current receiving wallet on its own cannot replace the destination without the authenticated PayMe flow and the required second factor.
  • Recovery codes are single-use. Store them offline or in a trusted password manager.
  • Repeated invalid Authenticator or recovery attempts are rate-limited.
  • Hilt never asks for a seed phrase or private key.
  • Hilt does not sign payment transactions for a payer.

​
Troubleshooting

​
The Authenticator code is invalid or expired

Wait for the next code and enter it promptly. Make sure the date and time on the Authenticator device are set automatically. An invalid code does not remove the PayMe session; repeated failed attempts can be temporarily rate-limited.

​
The wallet approval expired

Return to Wallet Security and start Authenticator setup again. Use the newest approval link only.

​
The connected wallet does not match

Switch to the wallet address shown as the current receiving wallet. A different wallet cannot approve initial Authenticator enrollment.

​
I cannot open my usual wallet from the setup browser

Copy the one-time approval link into the browser inside the current receiving wallet, approve the message there, and return to the original security page.

​
I lost the current receiving wallet

If Wallet Security was already enabled, authorize the change with the Authenticator app or an unused recovery code, then sign with the new wallet. If it was not enabled, self-service replacement is blocked. Enable Wallet Security soon after creating a PayMe link, save the recovery codes before leaving setup, and review the receiving handle and wallet before sharing the link. When changing wallet, verify the new address in the wallet itself before signing.