Security & Risk Disclosure

Keys are derived from a BIP39 recovery phrase generated in your browser using the operating system's cryptographic random source, with an optional 25th word you choose.

The vault is encrypted with AES-256-GCM. The encryption key comes from your device passkey (WebAuthn PRF) where supported, or from PBKDF2-SHA256 with 600,000 iterations over your 6-digit passcode. Keys are decrypted only in memory, only while unlocked.

Signing and submission happen locally against public XRPL nodes. There is no server, no account and no key escrow.

Auto-lock after inactivity, hold-to-confirm signing, full recipient address verification, large-transfer warnings, trustline risk labels, and an explicit fee disclosure before every signature.

A compromised device, malware, a malicious browser extension, a screen recorder, or anyone who obtains your recovery phrase. Phrase theft is total and irreversible loss.

A 6-digit passcode protects against casual device access, not against an attacker who has copied your encrypted vault and can attempt offline guessing. Your recovery-phrase backup and device security remain the real defence.

Sending to a wrong or attacker-supplied address. XRPL transactions are final and cannot be reversed.

Accounts require a base reserve in XRP that cannot be spent, and each trustline or object adds an owner reserve. Adding a trustline to an unverified issuer can expose you to worthless or malicious tokens, freezes and clawback where enabled.

DEX swaps execute against live order books; thin liquidity can produce poor execution. Third-party price and ETF data may be stale or unavailable.

XRP and XRPL tokens are volatile and can lose all value. Nothing in this app is investment advice. Only hold what you can afford to lose.

If you believe you have found a security issue, report it privately to the operator of this deployment before disclosing it publicly. Please do not include your recovery phrase, keys or passcode in any report.