Horrible security. Set up complex password, but app just sends text code to sign in. So, if you lose your phone and someone gets into it, they can just get a text on your stolen phone, and log in! When first downloaded, app prompts you for biometric login if you want. But, app doesn't lock when it's closed.