Security

Security built around user control

C4T Wallet is designed so that control of assets stays with the user. This page explains what that means in practice, and where the responsibilities and limits sit.

C4T Wallet security settings screen

Non-custodial model

C4T Wallet does not hold, control or manage user funds. Private keys are generated on the device and remain under the user's control. There is no account on our side that can move your assets.

Recovery phrase ownership

Your recovery phrase is the only way to restore access to your wallet. It is generated for you and never shared with us. Anyone who obtains it can access your assets, and nobody can recover it on your behalf if it is lost.

Local passcode and biometric unlock

Access to the app can be protected by a passcode and device biometrics, with automatic locking after inactivity. These controls protect local access to the app on your device.

Backup and restore responsibility

Backing up your wallet is a user action. Store your recovery phrase offline, in a secure location, and never enter it into any website, message or application that requests it.

Wallet self-custody

Self-custody means full control and full responsibility. There is no password reset, no support-side account recovery, and no ability for us to reverse an action performed with your keys.

Irreversible blockchain transactions

Transactions broadcast to a blockchain network cannot be cancelled or reversed. Always verify the recipient address, the network, and the amount before confirming a transfer.

Third-party limitations

Some features rely on third-party providers for swaps, bridges, on-ramp or trading access. Those services operate under their own terms, security practices and regional restrictions, and are outside the wallet's control.

Good practice

Practical steps that protect your wallet

Self-custody security depends largely on user habits. These steps materially reduce risk.

Write your recovery phrase down offline and keep at least one secure copy.
Never share your recovery phrase or private keys with anyone, including support requests.
Verify addresses and networks before every transfer.
Review and revoke token allowances you no longer need.
Review and revoke connected third-party services you no longer use.
Keep your device operating system and the app up to date.

What we cannot do

We cannot access your wallet, recover a lost recovery phrase, reverse a broadcast transaction, or control the execution, availability or pricing of third-party services accessed through the wallet. No claim is made that any wallet, including this one, eliminates the risks of holding digital assets.