Key Management

Your keys — only yours. We have no access to them.

---

Non-Custodial Approach

QR Wallet is a non-custodial wallet. This means:

• Private keys are stored only on your device

• QR Wallet cannot access your keys

• QR Wallet cannot freeze your funds

• No one but you can make a transaction

Comparison: In custodial services (exchanges like Binance, Coinbase), your keys are held by the company. If they block your account — you lose access. In QR Wallet, this cannot happen.

---

How Keys Are Stored

┌──────────────────────────────────┐
│   Your Device                    │
│                                  │
│   ┌────────────────────────┐     │
│   │  Secure Storage        │     │
│   │  (Keychain / Keystore) │     │
│   │                        │     │
│   │  🔑 Private key        │     │
│   │  🔑 Mnemonic phrase    │     │
│   └────────────────────────┘     │
│                                  │
│   Protected by biometrics        │
└──────────────────────────────────┘

• iOS: Keychain with Secure Enclave protection

• Android: Android Keystore

Keys are encrypted and accessible only upon successful biometric authentication.

---

Wallet Creation

When creating a wallet, a mnemonic phrase (seed phrase) of 12 or 24 words is generated. From it, the following are mathematically derived:

1. EOA private key — for signing transactions

2. EOA public address — for receiving funds

3. Smart Account address — computed from the EOA address

---

Backup

The mnemonic phrase is the only way to recover your wallet. Store it:

• On paper in a secure location

• In a password manager (1Password, Bitwarden)

• Never in notes, messengers, or cloud storage

If you lose your device and haven't saved the seed phrase — access to funds is lost forever. QR Wallet cannot recover it.

---

Wallet Import

You can import an existing wallet:

• Mnemonic phrase (12/24 words) — full import

• Private key — import a single account

---

FAQ

Can QR Wallet see my private key?

No. The key is stored in the device's Secure Storage and never leaves it.

What if I lose my phone?

Restore the wallet on a new device using your seed phrase. All funds intact.

What if QR Wallet shuts down?

Your funds are on the blockchain — nobody can take them away. Recovery depends on where your funds are:

EOA funds — import your seed phrase into any EVM wallet (MetaMask, Rainbow, etc.). You'll see your EOA balance immediately.

Smart Account funds (including staked positions in Aave, Compound, Lido, etc.) — your EOA key is the sole owner of the Smart Account. SA address is computed deterministically from your EOA using the open CREATE2 standard. To access SA funds:

1. Import your seed phrase into any ERC-4337 compatible wallet

2. The wallet will derive your EOA → compute your SA address → give you full access

3. You can withdraw staked positions, transfer tokens — everything, just like in QR Wallet

Why can't I see SA funds in MetaMask? MetaMask only shows EOA balances. It does not support Smart Accounts (ERC-4337). This doesn't mean your funds are lost — it means you need a wallet that supports this standard.

Important: ERC-4337 is an open Ethereum standard, not proprietary to QR Wallet. Multiple independent wallets and tools support it. Your Smart Account is a standard on-chain contract — it will exist as long as the blockchain exists.

Solana funds — import your seed phrase into any Solana wallet (Phantom, Solflare, etc.).

Tron funds — import your seed phrase into any Tron wallet (TronLink, etc.).