Mobile App
Track balances, follow the built-in security course and approve everyday transactions from your phone.
New XAUT digital gold is now supported
Your keys. Your gold. Your future.
An air-gapped hardware wallet pairs with a free security course, so you can hold Bitcoin, Ethereum and tokenized gold like XAUT — with the recovery phrase always in your own hands and never on a server.
Certified secure element Open-source firmware 24 free lessons
Phrase securedOffline · air-gapped
Build your setup
Pick the wallet that fits how you hold
Start with the app to learn and track, add a hardware wallet for long-term storage, and use the browser extension for everyday DeFi — the same recovery phrase, three places to use it.
Hardware Wallet
Air-gapped signing with its own screen and keypad. Your seed is generated on-device and never touches the internet.
Browser Extension
Connect to Web3 from your desktop browser. Approvals are always shown in full before you sign.
Works across the networks you already hold
- Bitcoin
- Ethereum
- ERC-20
- TRON
- TON
- Solana
- Polygon
- BNB Chain
- Arbitrum
- XAUT gold
Digital gold, onchain
Own a claim on real gold with XAUT
XAUT is a tokenized gold asset: each unit represents a claim on one troy ounce of physical gold. Hold it in the same wallet as the rest of your portfolio, with the keys on your device.
Backed one-to-one by allocated gold
Every token maps to gold held in audited vaults, so the backing is a legal claim rather than a promise of future delivery.
Liquid around the clock
Move gold in seconds instead of shipping bars, and without arranging your own storage or paying a custodian directly.
Gold tokens can trade above or below the spot price of gold, and redemption terms are
set by the issuer. This page is educational and is not investment advice.
XAUT 6.0 oz held
One secure hub
Your all-in-one gateway to self-custody
Storage, signing and education live in one place. The app watches your balances, the hardware wallet performs every signature, and the learning hub teaches you how to spot scams before they cost you.
A certified secure element
Keys are generated and stored inside a tamper-resistant chip, not in app memory or the cloud.
Guided onboarding
A five-step setup verifies your recovery phrase before a single coin moves.
Always in your control
No custody service and no seed escrow. The recovery phrase is something only you hold.
Security first
Why this is the safer choice
Every screen explains the risk before you approve it. Nothing here asks you to trust a server with your keys.
Blind signing is blocked by default. Before you approve, the device shows the exact amount and destination in plain language.
The recovery phrase is created on the device and never leaves it. There is no recovery service that can hand your funds to someone else.
Support for major networks and tokens, including XAUT, so gold and crypto live in one portfolio.
The firmware is publicly auditable and reproducibly built, so anyone can verify what runs on your device.
Security patches and new network support for the life of the device, with no subscription for basic protection.
Free security course
Learn the basics, then protect your assets
Plain-English lessons on seed phrases, phishing and approval scams. No jargon, no sales pitch — just the handful of habits that stop most losses before they happen.
01
Seed phrase 101Why your 24 words are the wallet
02
Spotting phishingFake sites, fake support, fake airdrops
03
Approval hygieneRevoking the permissions you forgot about
Social proof
Trusted by self-custody holders
“The setup checker caught a backup mistake I would never have noticed on my own. That one screen saved the whole portfolio.”
Verified holderSelf-custody since 2021
“I moved my gold into cold storage in one afternoon. The guide walked me through every confirmation instead of hiding the steps.”
Long-term investorHardware wallet user
“Finally a wallet that explains why each step matters. Blind signing is off by default, which is exactly what I want to teach my team.”
Security engineerRuns a validator
“The browser extension plus the hardware wallet removed the guesswork. I finally know which device is actually signing.”
Community memberUses the desktop extension
Your one-stop gateway to safe digital assets
Set up a wallet in fifteen minutes, learn the habits that keep it safe, and hold your crypto and XAUT gold on your own terms.
Security, in detail
The questions people ask before they move real money
Short answers on recovery phrases, phishing and approvals, plus an expandable checklist you can hold any wallet against.
Where is my recovery phrase actually stored?
Nowhere online. On a hardware wallet the 24 words are generated on the certified secure element and never leave the device, so nothing on the internet can be used to rebuild your keys.
In the app and extension the phrase is shown to you once. Write it on paper or metal and keep it offline — the wallet never asks you to type it into a website.
How do I spot a phishing site or a fake support account?
No legitimate support agent opens the chat first, asks for your 24 words, or asks you to "validate" a wallet. Treat urgency, look-alike domains and unexpected airdrops as red flags.
Type the address yourself instead of clicking links, and bookmark the real site once. The app shows a warning before you approve anything from an unfamiliar source.
Why should I review and revoke token approvals?
An approval lets a contract move a specific token out of your wallet later. Scam contracts request unlimited approvals so they can drain funds at any time, long after you have forgotten the transaction.
Review approvals regularly, revoke the ones you no longer use, and keep high-value assets behind a hardware wallet that confirms every signature on its own screen.
What happens if I lose or break my device?
Your assets live on the blockchain, not on the device, so a lost phone or wallet is replaceable. Restore the same wallet on a new device with your recovery phrase and your balances come back.
That is exactly why the phrase — and not the hardware — is the wallet. Store a second copy in a separate safe location, protected from fire and water.
Is the firmware open source, and how are updates delivered?
The firmware is open source so independent reviewers can inspect how seeds are generated and how signatures are confirmed. Updates are signed, and the device tells you when one is available.
Never install firmware or software from a link in a message — only through the official app or a site you navigated to yourself.
Software wallet security check
| Checkpoint | Why it matters | App & extension |
|---|---|---|
| Open-source code | Independent reviewers can verify how keys are handled. | Source published for public review |
| Recovery-phrase handling | Only you should ever see the 24 words. | Shown once, never requested online |
| Scam & phishing warnings | Warnings catch malicious sites before you sign. | Built-in checks before every approval |
| Approval review | You should see exactly what a contract can move. | Full request shown before signing |
| Device lock | A stolen unlocked phone is an open door. | Passcode and biometric lock |
| Hardware pairing | High-value assets should need a second device. | Pairs with the hardware wallet |
Hardware wallet security check
| Checkpoint | Why it matters | Hardware wallet |
|---|---|---|
| Certified secure element | The seed should live in tamper-resistant silicon. | Seed generated and stored on-device |
| On-device confirmation | You must be able to read what you are signing. | Details shown on its own screen and keypad |
| Air-gapped signing | Keys that never touch the internet cannot be drained remotely. | Signing happens offline inside the device |
| Signed firmware | Untrusted updates could compromise the device. | Signed, verifiable firmware updates |
| Physical passphrase | An extra secret protects against a stolen device. | Optional passphrase layer |
| Recovery | You need a device-independent backup. | Restore the 24-word phrase on any device |