New Xendra Keys — shard your phrase, recover with any two. Read the note →

Docs

Documentation

Everything needed to run Xendra properly, in the order you will need it. Start at the top if the wallet is new to you.

Applies to 4.8.xUpdated 21 Aug 2026Platforms iOS, Android, desktop, extension

01First fifteen minutes

  1. Install from a source you verified. Use the store links on the download page, or the direct build with its published hash. Never a link from a message.
  2. Create a wallet. The app derives one recovery phrase and seven keyspaces from it. Nothing is sent anywhere.
  3. Write the phrase down. On paper or steel, not in a photo, not in a notes app, not in a password manager you do not control.
  4. Pass the check. The app asks for three random words back. This is not a formality; it is the only proof your copy is correct.
  5. Send a small amount first. Receive, then send back. Learn the confirmation screen while the stakes are two euros.
  6. Turn on the extras. Biometric unlock, auto-lock at one minute, and a second backup location.

The one rule

Nobody legitimate will ever ask for your recovery phrase. Not us, not a support agent, not an airdrop, not a wallet-validation page. Any request is theft in progress.

02Accounts, addresses and derivation

One phrase produces an unlimited number of accounts. Each account holds one address per network, all derived deterministically, so restoring the phrase anywhere rebuilds the same set.

NetworkCurveDefault pathAddress format
Bitcoinsecp256k1m/86'/0'/0'/0/iTaproot, SegWit and legacy on request
Litecoinsecp256k1m/84'/2'/0'/0/iNative SegWit, MWEB optional
EVM chainssecp256k1m/44'/60'/0'/0/iOne address across all 12 chains
Tronsecp256k1m/44'/195'/0'/0/iBase58, TRC-20 aware
Solanaed25519m/44'/501'/i'/0'Base58, versioned transactions
TONed25519m/44'/607'/i'v4R2 wallet, .ton names resolved
Aptosed25519m/44'/637'/i'/0'/0'Move resources decoded

Use separate accounts for separate purposes. A dapp account that connects to anything, and a savings account that connects to nothing, is the cheapest risk reduction available.

03Xendra Keys: sharding your phrase

A single piece of paper is a single point of failure, for loss and for theft alike. Xendra Keys splits your seed into three shards using Shamir's Secret Sharing. Any two rebuild the wallet. Any one on its own is mathematically useless.

Setting it up

  1. Open Settings › Backup › Xendra Keys and confirm your unlock.
  2. The app generates three shards offline. Each is 33 words plus a checksum and a shard index.
  3. Store them apart: one at home, one in a bank box or with a lawyer, one with a person who does not know the others exist.
  4. Verify by reconstructing on a spare device with two shards before you rely on it.

Recovering

Choose Restore › From shards, enter any two, and the seed is reassembled in the enclave. The shards are never combined outside it and are wiped from memory afterwards.

Choose holders carefully

Two holders who can reach each other can reach your funds. Split across people who do not share a household, a lawyer, or a jurisdiction, and tell each of them only that they hold a shard.

04Sending, fees and stuck transactions

The confirmation screen shows the decoded action, the simulated balance change, the fee and the worst case. Read the amounts, then read the network, then read the recipient.

If a transaction is stuck

  • Bitcoin and Litecoin: use Bump fee for replace-by-fee, or child-pays-for-parent if the transaction cannot be replaced.
  • EVM: Speed up resends the same nonce with a higher tip. Cancel sends a zero-value self-transfer on that nonce.
  • Solana: transactions expire. If it did not land, nothing happened, and you can safely retry with a higher priority fee.
  • Tron: a failed transfer usually means energy ran out. Retry with rental enabled.

A transaction that has confirmed cannot be reversed by anyone, including us. Sending to the wrong address is final.

05Approvals and allowances

On EVM chains, most losses come from token approvals rather than transfers. Xendra rewrites unlimited approvals to the exact amount the transaction needs, and lists every live allowance under Settings › Approvals with its age, its spender and its risk note.

Revoke anything you no longer use. Revocation is an on-chain transaction and costs a network fee, but it removes a standing permission over your balance.

06Networking appendix: every call the app makes

The wallet makes no network request that is not on this list, and none at all until you open a screen that needs data.

CallWhenContains
Balance and historyOpening an accountYour public addresses
Fee and gas estimateComposing a sendNetwork and payload size
SimulationBefore a confirmation screenThe unsigned transaction
QuotesOpening swap or bridgePair, amount, chain
PricesEvery 60 s while openAsset list only
Update checkDailyVersion and platform

Set your own endpoints under Settings › Networks › RPC. Tor and system proxies are respected on desktop and Android. See the privacy policy for retention.

07Troubleshooting

My balance is wrong

Pull to refresh, then check the address on a block explorer. If the explorer shows the funds and the app does not, the indexer is behind. Check status and try your own RPC.

I restored my phrase and the wallet is empty

Almost always one of three things: a passphrase you set and forgot, a different derivation path from another wallet, or a typo in one word. Use Restore › Advanced to scan alternative paths, and re-check word order against the BIP-39 list.

A token is not showing

Add it by contract address under Assets › Add token. Confirm the contract on an explorer first, because scam tokens copy real names.

The extension will not connect

Refresh the page, then reconnect from the site's own connect button rather than from the extension. If the site is stuck, remove it under Connections and connect again.

Start holding your own keys.

iOS, Android, desktop and a browser extension — the same vault on all of them. Free, and it stays free.