Security model
Secrets never leave your device.
VaultXRP is built on a simple principle: only you should be able to access, sign, and recover your XRP. Here's how we uphold that.
On-device key generation
Your 24-word recovery phrase and private keys are generated on your device using the operating system's secure random source. They are never transmitted to VaultXRP or any server.
Secure Enclave-backed Keychain
Secrets are stored in the iOS Keychain, protected by the Secure Enclave and your device passcode. Access is gated by Face ID or passcode.
Local signing
Transactions are constructed and signed locally on your device. Only the signed transaction is broadcast to the XRP Ledger — never your keys.
No accounts, no tracking
There is no VaultXRP account. We do not collect email, phone, wallet addresses, or usage analytics tied to your identity.
Privacy screen & auto-lock
The app blurs sensitive content in the app switcher and auto-locks after inactivity. Face ID or passcode is required to unlock.
You are the recovery
We cannot see your recovery phrase and cannot recover funds for you. Back up your 24-word phrase offline, in a safe place, and never share it.
A note on responsibility
Self-custody means full control — and full responsibility. If you lose your 24-word recovery phrase, your funds cannot be recovered by anyone, including VaultXRP. Store your phrase offline, never enter it into websites, and never share it. Transactions on the XRP Ledger are irreversible once validated.