How it works
Architecture & endpoints
On-chain (self-custody)
Addresses are BIP84 native segwit, derived at m/84'/0'/0'. Your recovery phrase is encrypted with AES-GCM using a PBKDF2 key from your password and stored only in this browser. Transactions are built and signed locally, then broadcast.
Chain data
Balances, UTXOs and fee estimates come from an Esplora-compatible API through a same-origin proxy at /api/public/btc/*. It defaults to mempool.space and can be pointed at your own Esplora or Electrs instance with the BTC_ESPLORA_URL setting.
Lightning
Lightning runs on our own LND node, reached server-side over its REST API with a macaroon that never touches the browser. The wallet can create invoices, watch them settle, decode and pay invoices, and read node and channel balances.
Hardware wallets
Ledger devices connect over WebHID with the Bitcoin app open. The account xpub is read from the device, addresses can be verified on screen, and every transaction is signed on the device itself.
Part of the honest.money ecosystem.