Skip to content
DueWallet

Security

Security that starts with you holding the keys.

DueWallet is self-custodial by design. Your private keys are generated, encrypted and stored on your device — never on our servers. Here is every layer that protects your assets.

DueWallet Security Center showing a 92 out of 100 security score
Keys stored on our servers
0
Independent audits
4
On-device encryption
AES-256
Max bug bounty reward
$250K

Layers of protection

Defense in depth: every layer is designed to work even if another fails.

  • Keys never leave your device

    Private keys are generated locally using a cryptographically secure random number generator and never transmitted.

  • Encrypted secure storage

    Keys are encrypted with AES-256-GCM and stored in the iOS Secure Enclave or Android Keystore.

  • Biometric & PIN lock

    Face ID, fingerprint or a 6-digit PIN is required to open the app and to approve every transaction.

  • Transaction simulation

    See exactly what a transaction will do to your balances before you sign it, in plain language.

  • Scam & phishing alerts

    Known malicious contracts, drainer sites and fake tokens are flagged before you interact with them.

  • Approval manager

    Review and revoke token spending approvals you have granted to dApps at any time.

Explore security

DueWallet will never ask for your recovery phrase

No DueWallet employee, support agent or bot will ever ask for your 12 or 24 words. Anyone who asks is trying to steal your funds.

Take full control of your crypto today.

Create a DueWallet in under a minute. No sign-up, no email, no KYC to get started. Just you and your keys.