Docs
Documentation
Everything needed to run Xendra properly, in the order you will need it. Start at the top if the wallet is new to you.
01First fifteen minutes
- Install from a source you verified. Use the store links on the download page, or the direct build with its published hash. Never a link from a message.
- Create a wallet. The app derives one recovery phrase and seven keyspaces from it. Nothing is sent anywhere.
- Write the phrase down. On paper or steel, not in a photo, not in a notes app, not in a password manager you do not control.
- Pass the check. The app asks for three random words back. This is not a formality; it is the only proof your copy is correct.
- Send a small amount first. Receive, then send back. Learn the confirmation screen while the stakes are two euros.
- Turn on the extras. Biometric unlock, auto-lock at one minute, and a second backup location.
The one rule
Nobody legitimate will ever ask for your recovery phrase. Not us, not a support agent, not an airdrop, not a wallet-validation page. Any request is theft in progress.
02Accounts, addresses and derivation
One phrase produces an unlimited number of accounts. Each account holds one address per network, all derived deterministically, so restoring the phrase anywhere rebuilds the same set.
| Network | Curve | Default path | Address format |
|---|---|---|---|
| Bitcoin | secp256k1 | m/86'/0'/0'/0/i | Taproot, SegWit and legacy on request |
| Litecoin | secp256k1 | m/84'/2'/0'/0/i | Native SegWit, MWEB optional |
| EVM chains | secp256k1 | m/44'/60'/0'/0/i | One address across all 12 chains |
| Tron | secp256k1 | m/44'/195'/0'/0/i | Base58, TRC-20 aware |
| Solana | ed25519 | m/44'/501'/i'/0' | Base58, versioned transactions |
| TON | ed25519 | m/44'/607'/i' | v4R2 wallet, .ton names resolved |
| Aptos | ed25519 | m/44'/637'/i'/0'/0' | Move resources decoded |
Use separate accounts for separate purposes. A dapp account that connects to anything, and a savings account that connects to nothing, is the cheapest risk reduction available.
03Xendra Keys: sharding your phrase
A single piece of paper is a single point of failure, for loss and for theft alike. Xendra Keys splits your seed into three shards using Shamir's Secret Sharing. Any two rebuild the wallet. Any one on its own is mathematically useless.
Setting it up
- Open Settings › Backup › Xendra Keys and confirm your unlock.
- The app generates three shards offline. Each is 33 words plus a checksum and a shard index.
- Store them apart: one at home, one in a bank box or with a lawyer, one with a person who does not know the others exist.
- Verify by reconstructing on a spare device with two shards before you rely on it.
Recovering
Choose Restore › From shards, enter any two, and the seed is reassembled in the enclave. The shards are never combined outside it and are wiped from memory afterwards.
Choose holders carefully
Two holders who can reach each other can reach your funds. Split across people who do not share a household, a lawyer, or a jurisdiction, and tell each of them only that they hold a shard.
04Sending, fees and stuck transactions
The confirmation screen shows the decoded action, the simulated balance change, the fee and the worst case. Read the amounts, then read the network, then read the recipient.
If a transaction is stuck
- Bitcoin and Litecoin: use Bump fee for replace-by-fee, or child-pays-for-parent if the transaction cannot be replaced.
- EVM: Speed up resends the same nonce with a higher tip. Cancel sends a zero-value self-transfer on that nonce.
- Solana: transactions expire. If it did not land, nothing happened, and you can safely retry with a higher priority fee.
- Tron: a failed transfer usually means energy ran out. Retry with rental enabled.
A transaction that has confirmed cannot be reversed by anyone, including us. Sending to the wrong address is final.
05Approvals and allowances
On EVM chains, most losses come from token approvals rather than transfers. Xendra rewrites unlimited approvals to the exact amount the transaction needs, and lists every live allowance under Settings › Approvals with its age, its spender and its risk note.
Revoke anything you no longer use. Revocation is an on-chain transaction and costs a network fee, but it removes a standing permission over your balance.
06Networking appendix: every call the app makes
The wallet makes no network request that is not on this list, and none at all until you open a screen that needs data.
| Call | When | Contains |
|---|---|---|
| Balance and history | Opening an account | Your public addresses |
| Fee and gas estimate | Composing a send | Network and payload size |
| Simulation | Before a confirmation screen | The unsigned transaction |
| Quotes | Opening swap or bridge | Pair, amount, chain |
| Prices | Every 60 s while open | Asset list only |
| Update check | Daily | Version and platform |
Set your own endpoints under Settings › Networks › RPC. Tor and system proxies are respected on desktop and Android. See the privacy policy for retention.
07Troubleshooting
My balance is wrong
Pull to refresh, then check the address on a block explorer. If the explorer shows the funds and the app does not, the indexer is behind. Check status and try your own RPC.
I restored my phrase and the wallet is empty
Almost always one of three things: a passphrase you set and forgot, a different derivation path from another wallet, or a typo in one word. Use Restore › Advanced to scan alternative paths, and re-check word order against the BIP-39 list.
A token is not showing
Add it by contract address under Assets › Add token. Confirm the contract on an explorer first, because scam tokens copy real names.
The extension will not connect
Refresh the page, then reconnect from the site's own connect button rather than from the extension. If the site is stuck, remove it under Connections and connect again.
Start holding your own keys.
iOS, Android, desktop and a browser extension — the same vault on all of them. Free, and it stays free.