FAQ

Is my private key ever uploaded?

No. Keys are generated/imported and encrypted in your browser using AES‑GCM‑256. Nothing leaves the device.

What is the Zero Vault?

A local, optional key vault. It derives an encryption key from your passphrase plus a Z‑Pattern to add an extra “pepper” before storing the encrypted private key in IndexedDB.

Can I use Phantom or Brave instead?

Yes. Click connect. We detect the extension provider and use its built‑in signing flow. Your extension keys remain under the extension’s control.

Which networks are supported?

Solana is primary. The UI uses the JSON‑RPC you choose. Multi‑sig and token flows can be added later.

Can I verify signatures elsewhere?

Yes. Sign any message and verify with standard Ed25519 libraries. The signatures are standard Ed25519, no proprietary scheme.

What if I forget my passphrase or Z‑Pattern?

You lose access to the vault key. There is no recovery by design. Use the extension path (Phantom/Brave) if you prefer their recovery methods.