The no seed phrase wallet — because you can't phish what isn't there
Ask any crypto security researcher what drains wallets and the answer comes back the same: seed phrases. Fake support tickets that ask you to "verify" your 12 words. Screenshots synced to a compromised cloud. Malicious browser extensions with a "recovery phrase" form. Every seed-phrase wallet is one social-engineering pass away from a total loss.
VEYRNOX removes seed phrases from the UI by design. There is nothing to write down, nothing to screenshot, and nothing to phish.
Why seed phrases are the #1 attack vector
- Users have to store them somewhere. Paper gets lost. Photos sync. Password managers get breached.
- Users have to type them somewhere. Every "recover wallet" flow is also a "steal wallet" flow.
- Attackers only need one moment. One phishing form, one clipboard sniffer, one shoulder surf.
- The recovery UX teaches users to hand them over. If the real app asks for the phrase, so can the fake one.
How VEYRNOX removes seed phrases
- 8-digit PIN onboarding. That is the entire user-facing setup. No 12 or 24 words. (Free tier)
- Hardware-bound signing. Signing keys never leave the Secure Enclave / StrongBox in cleartext. (Free tier)
- No recovery-phrase field in the UI. A phishing site cannot mimic what does not exist in the real app. (Free tier)
- Shamir Secret Sharing — Safety Plus ($5.99/mo). The underlying seed is split into KEK-encrypted shards distributed across your device (Secure Enclave / StrongBox) and your personal cloud (iCloud / Google Drive). This is the cross-device recovery layer that upgrades the Free plan's on-device custody.
- No shard held by Veyrnox. This is still self-custody. We can't sign for you and we can't be compelled to.
Compared to seed-phrase wallets
- Seed-phrase wallet: 12–24 words → user must store → user must type to recover → phishable, screenshot-able, shoulder-surf-able.
- VEYRNOX: 8-digit PIN + biometric → shards held device + your cloud → recovery via cloud + PIN → nothing to phish.
FAQ
What happens if I lose my phone? On Safety Plus, install VEYRNOX on a new device, sign in to your personal cloud, and combine your cloud shard with a fresh device shard using your PIN and biometric. Your keys never touched a Veyrnox server. (Cross-device recovery via Shamir sharding is a Safety Plus feature.)
What if I lose my phone and my cloud account? That is the out-of-scope case — the same one where a seed-phrase user has burned their paper backup. Keep your cloud account recoverable.
Is this still self-custody? Yes. Veyrnox holds no shard, no key, and no ability to sign. Only you can reconstitute the seed.
What about the underlying seed — is there a "master phrase" I can export? The seed exists cryptographically but is not exposed as a phrase in the UI, by design. Removing the phrase removes the phishing surface.
Add AI Security Protection ($19.99/mo, coming soon)
Removing the seed phrase closes the biggest phishing surface a wallet has — no 12-word field for a spoofed site to harvest. AI Security Protection — $19.99/mo, coming soon is the Veyrnox tier that layers runtime, transaction-time warnings on top of that structural fix. Address Threat Screening pushes every recipient address through the TIP (Threat Intelligence Platform) edge function pre-sign. Phishing Site Detection is a curated blocklist (not an ML classifier) that flags fake dApp and bridge frontends. Risk Scoring is a nine-signal, rule-based composite scorer that runs pre-sign — deterministic, not a learned model. Personal AI Advisor is a chat you can ask about a specific address or transaction — advisory, on demand. All ten features are shipped, including Token Approval Review, Approval Monitor (periodic polling, not push), AI Risk Notes, Drainer Detection (local heuristics), Transaction Explanation, and Portfolio Q&A. See Plans & pricing for the full AI Security Protection tier — an AI Security add-on to the Veyrnox stack.
Related
- How Shamir Secret Sharing works — the math behind seed splitting
- Duress wallet — coercion resistance via decoy wallet
- Security at Veyrnox — full threat model, audit status, cryptography
- Trezor iOS alternative — hardware-bound signing on iPhone
- How seed phrase phishing works — anatomy of the #1 crypto theft vector