MetaMask alternative — Veyrnox: self-custody without the seed phrase
MetaMask made Ethereum usable, then it made phishers rich. Every fake token approval, every seed-phrase drainer, every malicious signature request that empties a wallet in one click — they all target the same two things: a browser extension that dApps can talk to at will, and twelve English words the user has been trained to type into text fields on demand. VEYRNOX is the MetaMask alternative for ETH and ERC-20 holders who want out of both. It runs as a mobile-native iOS app instead of a browser extension. It has no seed-phrase field anywhere in its UI. Recovery is a Shamir shard on your iPhone paired with a Shamir shard in your personal cloud (iCloud, OneDrive, Google Drive, Dropbox, etc.), both KEK-encrypted at rest and only ever reconstituted inside your device's Secure Enclave. dApp connections still work — Veyrnox speaks WalletConnect v2 to every EVM dApp and DEX MetaMask users already know.
Why users switch from MetaMask
MetaMask ships as a browser extension on Chrome, Firefox, Brave, and Edge, plus a mobile companion. The extension is convenient — it is also a permanent, persistent, JavaScript-scriptable surface that shares an origin model with every other tab you have open. Malicious sites cannot read your keys directly, but they can absolutely trick the extension into asking for a signature that drains an approval you granted six months ago and forgot about. The mobile app is safer than the extension by default, but it still stores a BIP-39 seed phrase and still walks a first-time user through writing twelve words on paper — which is the exact primitive attackers keep phishing successfully. The specific pains MetaMask users cite when they migrate:
- Seed-phrase phishing. Fake "MetaMask support" sites, fake wallet-reset flows, and fake airdrop-claim pages all end in the same "enter your 12 words" text box. The industry loses hundreds of millions a year to this one primitive. Veyrnox has no such text box.
- Browser-extension attack surface. Malicious extensions, look-alike extensions, and compromised legitimate extensions have all been used to swap addresses on the clipboard or push forged approval prompts. A mobile-native app with no extension counterpart cuts the whole surface.
- Blind signing on tokens and NFTs. ERC-20
approveand ERC-721setApprovalForAllrequests are notoriously easy to misread; Veyrnox surfaces the target, spender, and asset before the Face ID prompt. - No coercion mode. MetaMask has one wallet and one unlock, so an attacker with your phone and your face has the whole balance. Veyrnox Safety Plus adds a decoy wallet that unlocks under duress while your real holdings stay hidden.
- Ethereum-only worldview. MetaMask covers Ethereum and EVM L2s. Veyrnox covers BTC, ETH, SOL, USDC, USDT, MATIC, ARB, OP, AVAX, and BNB — one app, one recovery flow, one Face ID prompt per transaction.
Veyrnox vs MetaMask — feature-by-feature
| Feature | Veyrnox | MetaMask |
|---|---|---|
| Self-custody | Yes | Yes |
| Seed phrase shown in UI | No — never | Yes (12 words) |
| Shamir Secret Sharing backup | Yes — device + your iCloud | No — single seed |
| Hardware-bound signing | Yes — iOS Secure Enclave | In-app software keys on mobile |
| Biometric unlock | Face ID / Touch ID + 8-digit PIN | Face ID / passcode |
| Coercion Resistance (decoy wallet) | Yes — Safety Plus $5.99/mo | No |
| RASP tamper detection | Yes — blocks rooted/jailbroken | Limited |
| Trezor pairing | Yes | Yes |
| Multi-chain (BTC + ETH + SOL + 7 more) | Yes — 10 assets | EVM only (no native BTC/SOL) |
| Browser extension | No — mobile-native only | Yes (Chrome/Firefox/Brave/Edge) |
| iOS app | Yes — iOS-first | Yes |
| Android app | Coming soon | Yes |
| MPC | No — Shamir instead | No |
| KYC to use | No | No |
Migrating from MetaMask to Veyrnox
Veyrnox can import an existing MetaMask seed phrase. If you want a completely fresh Veyrnox wallet, you can also create a new one and transfer funds over instead.
- Install Veyrnox from the iOS App Store and complete the 8-digit PIN and iCloud shard setup.
- In Veyrnox, tap Receive on Ethereum (or any EVM L2 you use). Copy the address, or scan the QR from another device.
- In MetaMask, send your ETH and any ERC-20 tokens to that Veyrnox address. Do a small test transaction first, always.
- Repeat per L2 (Arbitrum, Optimism, Polygon, BNB Chain) — Veyrnox uses the same EVM address across every EVM chain, exactly like MetaMask.
- Once every asset is confirmed at the Veyrnox address, retire the MetaMask wallet. Keep your old seed phrase offline until you are certain nothing is left behind.
- For NFTs, use the same Receive address; MetaMask supports ERC-721 and ERC-1155 transfers to any Ethereum address.
Pricing
Free — $0 forever. Full self-custody, hardware-bound signing in the Secure Enclave, no seed phrase, and all 10 supported assets (ETH and every ERC-20 on Ethereum, Arbitrum, Optimism, Polygon, Avalanche, and BNB Chain).
Safety Plus — $5.99/month. Everything in Free plus Shamir-sharded seed backup across your device and your own cloud (KEK-encrypted shards at rest), and Coercion Resistance — a decoy wallet that unlocks under duress while your real holdings stay hidden.
AI Security Protection — $19.99/month · Coming soon. Everything in Safety Plus plus the AI Security Advisor: real-time warnings on malicious dApps, unsafe DEXs, phishing sites, and AI intervention on Transaction Simulation. See Plans.
All paid tiers are billed through the App Store and can be cancelled any time — self-custody is core to Veyrnox on every tier, so downgrading or cancelling never touches your keys, your balances, or your ability to sign. There is no annual lock-in, no free-trial dark pattern, and no separate exchange or brokerage account attached to your wallet. Compared to MetaMask, the whole billing surface is shorter: one wallet, one subscription line item, one place to cancel.
Security model
Veyrnox uses Shamir Secret Sharing to split the material needed to reconstruct your keys into KEK-encrypted shards across your device (Secure Enclave) and your personal cloud (iCloud, OneDrive, Google Drive, Dropbox, etc.). Reconstitution requires both, happens inside the Secure Enclave, and never surfaces a plaintext key. Veyrnox holds no shard, no key, and runs no signing infrastructure — so Veyrnox cannot recover your wallet on your behalf and cannot be legally compelled to hand it over. Every signing operation across BTC, ETH, SOL, and every supported EVM L2 is gated by Face ID or Touch ID and the 8-digit PIN. RASP (Runtime Application Self-Protection) blocks signing on rooted or jailbroken devices and on phones running instrumentation frameworks. And because the app never displays a recovery phrase, phishing sites cannot spoof a UI that does not exist. For deeper detail see Security at Veyrnox, No seed phrase wallet, Shamir wallet, and Duress wallet.
What Veyrnox does not do
The wallet market is full of adjacent products that quietly grow the trust surface — custodial swap engines, in-app exchanges, embedded lending, tokenised "yield" schemes, referral programs, and airdrop farms. Veyrnox does none of that. There is no in-app buy or sell flow that routes through a Veyrnox-operated custodian. There is no Veyrnox token, no rewards program, and no incentive structure that depends on you moving assets faster than you would otherwise. There is no analytics beacon collecting a fingerprint of what you hold or which dApps you visit — Veyrnox does not know your balance and does not need to. Every paid feature (Coercion Resistance on Safety Plus, the AI Security Advisor on AI Security Protection when it ships) is a security feature, priced as a subscription, billed through the App Store. That deliberate narrowness is what lets the trust model stay small enough to reason about: hardware-bound signing on your iPhone, two Shamir shards you control, one biometric prompt per transaction, and nothing in the middle.
Frequently asked questions
Is MetaMask unsafe?
MetaMask is not unsafe in the sense of being broken — it is a legitimate open-source wallet used by millions. The risks are structural: a browser extension with wide dApp access, and a BIP-39 seed phrase that users have been trained to type. Veyrnox removes both surfaces by shipping as a mobile-native iOS app with no seed-phrase field.
Can I import my MetaMask seed into Veyrnox?
Veyrnox can import an existing MetaMask seed phrase. If you want a completely fresh Veyrnox wallet, you can also create a new one and transfer funds over instead.
Does Veyrnox support the same EVM chains as MetaMask?
Veyrnox covers Ethereum, Arbitrum, Optimism, Polygon, Avalanche, and BNB Chain with a single EVM address, matching how MetaMask handles L2s. Veyrnox additionally covers Bitcoin and Solana natively — MetaMask does not.
How does Veyrnox compare on fees?
Veyrnox charges $0 for wallet operations. You pay only each chain's native network fee — gas in ETH on Ethereum, gas in ETH on Arbitrum and Optimism, gas in MATIC on Polygon, gas in AVAX on Avalanche, gas in BNB on BNB Chain. The estimated fee shows on the confirmation screen before Face ID.
Can I connect to dApps like MetaMask does?
Yes, via WalletConnect v2. Every EVM dApp and DEX that supports WalletConnect v2 — which is now the industry standard — can request a signature from Veyrnox. Review the request in-app, approve with Face ID, sign in the Secure Enclave.
What about my NFTs?
ERC-721 and ERC-1155 NFTs live on-chain, not in the wallet. Transfer them from your MetaMask address to your Veyrnox EVM address on the same chain and they continue to exist in your custody. Veyrnox displays them in the asset view.
How much does Veyrnox cost?
Free forever for full self-custody, Face ID, and multi-chain support. Safety Plus is $5.99/month and adds Shamir-sharded seed backup plus Coercion Resistance (decoy wallet). AI Security Protection is $19.99/month, coming soon.
When is Android available?
iOS today, Android coming soon. Veyrnox is iOS-first because the Secure Enclave, Face ID, and iCloud Keychain give the mobile hardware-bound security model a clean home. Android with StrongBox is on the roadmap.