Security
Your keys never leave your device.
SafeSend is self-custodial. There is no server behind it, no account to sign into, and no company that can touch your funds — including us.
Keys are encrypted at rest
Your recovery phrase and every private key are encrypted with a key derived from your password: PBKDF2-SHA256 at 150,000 iterations, then AES-256-GCM. The plaintext exists only in memory while the wallet is unlocked. Close the popup and it is gone; what remains on disk is an encrypted blob nobody can read without your password.
Because the encryption is real, the password is asked for every time you open the wallet. There is no way to skip it and still keep the keys encrypted. If you forget it, the wallet cannot be recovered — not by us, not by anyone.
Nothing is sent to us
No analytics, no telemetry, no tracking. The wallet talks directly to public blockchain nodes to
read balances and broadcast transactions — the same requests any wallet makes. It has no content
script on the pages you browse and no <all_urls> permission.
No remote code
Every library is bundled inside the extension, as Chrome’s Manifest V3 requires. The wallet never downloads or runs code from anywhere after you install it.
How reversible transfers hold funds
A protected transfer moves funds into a one-time escrow account whose key your wallet holds, encrypted, alongside your others. You can sweep it back until the recipient claims it.
Being honest about the risks
- This is early software. The code has not been independently audited.
- A claim link is bearer money — anyone holding it can claim that transfer. Treat it like cash.
- It holds real funds on public networks. Start with small amounts.