Skip to main content

Stays on your device

  • Accounts, balances, history, settings, and statements.
  • Exchange API keys, encrypted with a key stored next to your data.
  • Your PIN, stored as a one-way hash.
No Hoseki account. No telemetry. Hoseki cannot see your data.

Leaves your device

The desktop app starts on Blockstream’s public Electrum server. The introduction lets you keep it or connect your own node. Blockstream can see the addresses you track until you switch, even over Tor. See First run.

Most private setup

  1. Run your own node with an Electrum server.
  2. On desktop, connect to it. Use its .onion address with Connect via Tor when you’re away from home.
  3. Set Statement data to Configured Electrum server.
  4. On StartOS, use Your mempool server as the price source.

Stay safe

  • Never enter a seed phrase or private key. Control Center only needs public keys. It refuses any wallet that includes an extended private key, such as an xprv or zprv. If an earlier version saved one, updating replaces it with the matching public key.
  • Use read-only exchange API keys.
  • Set a PIN you don’t use elsewhere. See PIN and lock.
  • Delete wallet export and descriptor files after you use them.
  • Remove xpubs, addresses, and keys from logs before you share them.
  • Report security issues privately. See SECURITY.md.