Built to be secure.
Every wallet key, sealed in a secure enclave HSM.
Sealed keys
Each key is uniquely encrypted and sealed in a secure enclave HSM, unreadable even if stolen.
Your approval
Keys only sign what you ask them to. We never move your assets on our own.
Export anytime
Take any wallet’s private key with you whenever you like, and control it anywhere.
No passwords
Sign in with an email link, Discord, Telegram or a passkey. Nothing to leak or reuse.
Two-factor sign-in
Add a second step, so a stolen email or social account alone can’t get in.
Session control
See every signed-in device, when it was last active, and sign any of them out.
Staying safe
Most losses in crypto come from phishing and leaked keys. A few habits go a long way.
- Coinwave staff will never ask for your private keys, seed phrases or sign-in codes.
- Make sure you are on coinwave.gg before signing in or approving anything.
- Turn on two-factor authentication or add a passkey to your account.
- Keep exported private keys offline and never paste them into a website or chat.
- Be wary of direct messages on Discord, Telegram or X claiming to be from Coinwave.
- Review active sessions regularly and sign out devices you do not recognise.