Mobile Web3 wallets, while secure, have inherent risks due to the constraints of the mobile operating systems for iOS and Android. A mobile wallet is a software wallet and a "hot" wallet, which is less secure than hardware wallets or "cold" wallets. This means we are not able to keep the private key locked in a secure element at all times, and your mobile phone is connected to the internet.
Additionally the mobile wallet is a 1-of-1 key, as opposed to a multi-signature wallet, which means if someone were able to force you to unlock your phone and access your mobile wallet app, then you can lose all of your funds. We do not recommend any user store significant amounts of crypto on any mobile 1-of-1 wallet.
There are steps you can take to help mitigate some risks. Enable security features like biometrics (if available) and user generated passwords, keep your software up to date, and exercise caution when interacting with unknown or suspicious websites or applications.
For more information, please read our Kraken Wallet Security Architecture Blog Post.