Frequently asked questions

Veyrnox is a seedless, self-custody cryptocurrency wallet for iOS and Android. Signing keys are generated and used inside the phone's Secure Enclave and never leave it. The recovery backup is split into m-of-n Shamir Secret Sharing shares. There is no 12-word BIP-39 seed phrase in the user interface.

Veyrnox was founded by Al Socrates Jobson, Co-Founder and CTO of VEYRNOX LTD. Full author profile at /authors/al-jobson.

VEYRNOX LTD is a private limited company registered in England and Wales, UK Companies House number 17299951. Registered office: Suite Ra01, 195-197 Wood Street, London, E17 3NU, England.

Yes. Veyrnox does not hold your keys, your funds, or any custody claim over your wallet. Signing keys live inside your phone's Secure Enclave. Backup shares are distributed to locations you control. No party at Veyrnox can move funds from your wallet.

Veyrnox is a software company that publishes a non-custodial wallet. Because we hold no user funds, we are not a bank, broker, custodian, or money transmitter. The company is registered in the UK under Companies House 17299951. Third-party services integrated into the app (Transak for the Buy flow, RevenueCat for Safety Plus subscriptions) operate under their own licences and privacy policies.

A seedless wallet is a self-custody wallet that does not expose a 12 or 24-word BIP-39 phrase to the user. The signing key lives inside a hardware-backed enclave (Apple Secure Enclave, Android StrongBox) or is split across parties using multi-party computation (MPC) or Shamir Secret Sharing (SSS). See /blog/seedless-crypto-wallet for the full explainer.

The signing key never leaves the phone's Secure Enclave. What Veyrnox splits into m-of-n Shamir shares is the encrypted export blob — recoverable only when the required threshold of shares is combined. Shares are distributed at setup to locations you control: a second device, a partner, an encrypted cloud, offline paper or metal. There is no provider on the critical path and no single object to steal.

Shamir Secret Sharing (SSS) is a cryptographic scheme published by Adi Shamir in 1979. It splits a secret S into n shares such that any m of them reconstruct S and any m-1 reveal nothing. SatoshiLabs standardised it as SLIP-39 in 2017. Veyrnox uses SSS for the recovery backup while the signing key stays inside the Secure Enclave.

In MPC (multi-party computation) the private key never exists as a single object — two or more parties jointly compute a signature that verifies against one on-chain public key. In an enclave-plus-Shamir design like Veyrnox the signing key does exist as one object inside the Secure Enclave and is never exported; only the backup is split into shares. Both are seedless. MPC is protocol-dependent (see TSSHOCK 2023); Shamir's security floor is the hardness of the enclave.

Yes — repository at https://github.com/veyrnox/veyrnox.

The Safety Plus tier ships a duress PIN that opens a full-featured decoy wallet with independent transaction history. Under coercion the victim can hand over the small-balance wallet without revealing the real balance. Withdrawal caps and an optional silent alert can be configured on top. See /duress-wallet and /blog/crypto-kidnapping for the design and the documented case history.

A wrench attack is a physical-coercion attack where an attacker forces a victim to unlock a wallet at gunpoint, under torture, or after a home invasion. The name references the xkcd comic showing that a $5 wrench defeats any cryptography. Jameson Lopp's public index of documented physical attacks on crypto holders passed 170 cases by mid-2025. See /blog/the-5-dollar-wrench-attack.

An attacker generates a lookalike address whose first and last characters match one you recently used, then pushes a $0 transfer into your transaction history. If you copy the recipient from history rather than an address book, funds go to the attacker. Full mechanics at /blog/address-poisoning-attack.

Approval phishing steals funds through a signed transaction, not a stolen key. A malicious dApp asks you to sign a permit, Permit2, or setApprovalForAll message that grants a contract the right to move your tokens; the contract drains them later. Scam Sniffer recorded $494M lost this way in 2024. See /blog/approval-phishing-crypto.

The Security Advisor simulates transactions and parses permit and Permit2 signatures into human-readable form before the sign screen appears, so you can see the actual state change rather than an opaque hash. Approvals default to the exact amount rather than unlimited. See /blog/how-seed-phrase-phishing-works for the full threat model.

Yes. Veyrnox ships on both iOS (App Store) and Android (Google Play). Desktop and browser-extension clients are not currently available.

Yes. Multi-chain support includes Bitcoin, Ethereum, Solana, Polygon, Arbitrum, Optimism, Avalanche, and BNB Chain. See /multi-chain-wallet for the full list.

The base wallet is free. Safety Plus is a paid subscription tier that adds duress PIN, decoy wallet, and panic-wipe features. See /pricing for current tier pricing.

Yes, via a hand-off to Transak. Transak performs identity verification and processes card payments under their own licences. Veyrnox does not receive that personal data.

By default: nothing that identifies you. No account, no user database, no wallet or activity mirror on our servers. If you opt in, the app records anonymous product-usage events with a randomly generated install identifier that is never linked to your name, wallet, or addresses. Full details at /privacy.

Any opt-in usage events are stored on our own Supabase instance in the EU. Wallet keys and history live only on your device. See section 4 of /privacy for retention.

Delete the app or clear its on-device storage. That removes the encrypted wallet from your device. Back up your Shamir shares first. Guidance at /data-deletion.