Is the app secure?

Yes, the BankID app is at least as secure as the physical code token. When using the BankID app, there will not be any one-time passcode someone may steal from you. In addition, you will still need to use your password to complete an authentication or a signing. Please remember that your password is personal and that you never should share it with anyone.