A non-custodial wallet your app can embed.
Your users get a Safe smart account with the same address on every EVM chain. Their seed is split 2-of-3 and only ever rebuilt in their browser, inside an isolated vault. Your app never sees a key.
- Seed rebuilt only in the browser
- Shares verified by a signed manifest
- Kit and code work offline
2-of-3 Shamir
Any two shares rebuild the BIP-39 seed. One alone reveals nothing.
Passkeys with PRF
Unlock with Face ID, Touch ID or a security key. No seed phrase to type.
Safe smart accounts
ERC-4337 Safe with the same address on every chain. Deployment can be sponsored.SepoliaPolygon AmoyBase Sepolia
Offline recovery
An Emergency Kit and your recovery code open the wallet with no server, in a single-file tool with a published hash.
How it works
Every step that touches a key happens in the vault window, on its own origin. The app only ever receives addresses and signatures.
- 1
Sign in to the appApp
Email, password and a TOTP code. This is the app’s own account: the vault never sees the password.
- 2
Activate the walletVault window
Create a passkey, write down the recovery code and download the Emergency Kit with its offline tool.
- 3
Deploy the Safe on a chainVault window
Pick a network and deploy. The address does not change from one chain to another.
- 4
SignVault window
A message, EIP-712 typed data or a UserOperation. The app checks the signature against the Safe with ERC-1271.
- 5
Unlock, recover, relink or exportVault window
Test an unlock, recover without the passkey, link the wallet to another account or download the seed.
Live demo
Create a throwaway account. Everything runs on testnets.
- A browser and passkey provider with PRF support
- An authenticator app for the TOTP code
- Pop-ups allowed for this site: the vault opens in its own window