Non-custodial keys
Recovery phrases and private keys are encrypted at rest. Your account requires re-authentication to unlock them, and administrator access requires a second password check and is audit-logged.
Security principles
Your keys. Your crypto. Always.
Aureon is built around one idea: you should never have to trust us with your funds. Here is exactly how the wallet protects you.
By design
Security is not a feature. It is the foundation.
Every part of Aureon is designed to keep secrets on your side and give you clear control.
Signature-verified linking
External wallets are linked by signing a readable message. We verify the signature before an address is trusted.
Privacy controls
Hide balances with one tap. Recovery material is only ever displayed inside a short-lived, password-protected session.
Clear transaction review
Every send and swap is reviewed with fees, network and destination before confirmation. No hidden approvals.
Session protection
Password changes regenerate your session. Recovery unlocks expire automatically after ten minutes, and every administrator unlock is recorded.
Transparent networks
Network fees and destination chains are always shown, helping you avoid irreversible cross-chain mistakes.
Responsible disclosure
Found a vulnerability?
We welcome good-faith security research. Please give us a reasonable window to fix an issue before disclosing it publicly, and never test against wallets you do not own.
support@aureon.appWhat to include
- A clear description of the issue and impact.
- Steps to reproduce, with screenshots where useful.
- The affected URL, browser and account type.
- A safe way to contact you.
We will never ask you to share a recovery phrase or private key while investigating a report.
Good to know
Security questions
Can Aureon access my funds?
No. Aureon is non-custodial and cannot initiate transfers. Keys are encrypted and never shared with a third party. In this demo environment, transactions are recorded on a local ledger and are not broadcast on-chain.
What happens if I lose my recovery phrase?
There is no recovery without it. Keep at least two offline copies in separate locations. Aureon support cannot restore a phrase for you.
How does wallet linking stay safe?
We issue a one-time message with a nonce. Your wallet signs it, and we verify the signature against the address you provide. Linking never asks for a seed phrase or private key.
Are approvals and transactions simulated?
Yes in this environment. Sends, swaps and staking use a local demo ledger. The interface clearly labels these actions and sample data can be cleared from Settings.
Ready to take control?
Create a wallet in seconds. Your keys never leave your side.