Wallet Security

Safely explore all of Web3

Zerion can never access your recovery phrase or private keys. Independent audits, open extension code, and a live bug bounty are there so you don't have to take our word for it.

4
Independent audit firms
0
Keys Zerion can access
Immunefi
Live bug bounty
Ledger
Hardware wallet support

You hold the keys — not Zerion

Self-custody isn't a setting you switch on. It's how the wallet is built, and it's what every other guarantee on this page rests on.

Self-custodial by design

Your recovery phrase is generated on your device and stays there. Zerion can never read it, move your funds, or freeze your wallet.

Independently audited

Cure53, Trail of Bits, Secfault Security, and Peckshield have audited Zerion Wallet. The reports are published, not summarized.

Open source extension

The browser extension's code is public on GitHub, so you can read exactly what it does before you install it.

Ledger support

Pair a Ledger device to keep your keys in cold storage while still using every Zerion feature on mobile, extension, and web.

Optional encrypted backup

Back up your recovery phrase to iCloud or Google Drive behind a password only you know. It's entirely optional, and Zerion can't decrypt it.

No signup, no KYC

There's no account to create and no identity to verify. Download the wallet and it's ready.

Onchain security at your fingertips

Most losses onchain don't come from broken cryptography — they come from signing the wrong thing. Zerion is built to catch that moment.

Phishing detection

Known phishing sites and malicious apps are flagged automatically, before you connect a wallet to them.

Know what you're signing

Every transaction is previewed in plain language — from NFT mints to staking — so a malicious message can't hide behind hex.

Custom token allowances

Set your own spending limit on every approval, so no dapp gets more access to your funds than it actually needs.

Spam token filtering

Fake and airdropped spam tokens are filtered out instead of flooding your portfolio and burying what's real.

Report scams in-app

If something slips past the filters, report the token or NFT from inside the wallet and it gets filtered for everyone.

Watch-only wallets

Track any address in watch mode to follow it without ever importing a key or exposing your own.

Self-custody, in practice

What it actually means when nobody but you controls the wallet.

Nobody can freeze your funds

No company — Zerion included — can suspend your wallet, freeze your money, or stop your transactions.

Recovery stays with you

Your assets live onchain, not with Zerion. Your recovery phrase restores them in Zerion or any compatible wallet.

Bug bounty for white hats

A live Immunefi program rewards researchers who responsibly disclose vulnerabilities in Zerion Wallet.

If something looks wrong

Three things you can do the moment a transaction, a token, or the wallet itself doesn't look right.

1

Reject the transaction

Read the preview before you approve. If the assets moving aren't the ones you expect, reject it — nothing is signed until you say so.

2

Report the token or NFT

Flag scam tokens and spam NFTs from inside the app. Reports feed the filters that protect every other Zerion user.

3

Disclose a vulnerability

Found a bug in Zerion itself? Report it through our Immunefi program rather than exploiting it, and get rewarded for it.

Frequently asked questions

Own your crypto safely

Non-custodial, independently audited, and yours alone. Download Zerion and keep your keys.

Download Zerion