Generated on your device
Account secrets are created on your phone and never transmitted. Xaman cannot recover them for you, and nobody can request them.
Self-custody, by design
Xaman is built so that holding your own keys is the easy path, not the expert one. Here's what that means in practice.
Encrypted at rest
Secrets are stored encrypted in secure device storage, unlocked only when you authenticate to sign something.
You approve every action
Sign requests show the exact transaction — amount, destination, fee — and nothing is submitted to the ledger until you confirm.
No accounts, no tracking of funds
No email or identity is needed to hold XRP. Your balances live on the public ledger, not in a company database.
Habits that keep you safe
- Write your secret numbers on paper and store them offline
- Never share a secret or seed with anyone, including support
- Enable biometric or PIN protection on first launch
- Verify the destination address before approving a payment
- Treat unexpected sign requests as suspicious and reject them