> For the complete documentation index, see [llms.txt](https://docs.imperial.space/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.imperial.space/intro/security-and-trust.md).

# Security & Trust

## How Imperial Works

Imperial's core infrastructure includes:

* Frontend terminal to trade from
* Backend infrastructure to execute sophisticated orders
* Smart contract that is position owner so the backend infra can execute trades

{% hint style="info" %}
Imperial's smart contracts only give Imperial's bots authority to trade on a user's behalf, not to deposit/withdraw funds.
{% endhint %}

## Mobile/One Click Trading

Imperial enables one click trading (no wallet signing). 

Imperial never exposes your private keys. Imperial's mobile experience & one click trading experience are powered by[ JWTs](https://www.jwt.io/introduction#when-to-use-json-web-tokens), a standard of security across the web. Imperial issues a JWT with an expiry of a month, that can be cancelled at any time if the user is concerned in any way.\
\
Moreover, JWTs do not have the authority to deposit/withdraw funds. They only have the authority to place trades on the user's behalf. An exposed JWT would have the ability to place bad trades on the user's behalf, but not to withdraw their funds.

<br>

<figure><img src="/files/yspHl7PGt09uiORBRSNQ" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/ECsu7JpNZDJwI34ZKlXp" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/oE41KJwVkXwDlUzV2xko" alt=""><figcaption></figcaption></figure>