How Tegro Wallet protects your funds
Protecting a crypto wallet isn't one "magic button" — it's several independent layers. Let's walk through how they're built in Tegro Wallet, honestly, and why they're built that way.
When it comes to storing assets, the central question is simple: "Who actually controls my funds?" In Tegro Wallet the answer is unambiguous — you, and only you. Below we'll go through every layer of protection, from the architecture to the recovery phrase screen, and explain what happens under the hood in everyday language.
Non-custodial architecture: the keys live on your device
Tegro Wallet is a non-custodial wallet. That means your private keys and recovery phrase are created and stored only on your device. Tegro keeps no copy of your keys on any server and is technically unable to access them.
The practical takeaway is a single, crucial fact: Tegro cannot move, freeze, or debit your funds — even if someone badly wanted to. The service simply doesn't possess anything that could control your wallet. The other side of that same coin: responsibility for the recovery phrase rests entirely with you. We'll say that plainly once more at the end.
Recovery phrase encryption: scrypt + AES-256-GCM
The recovery phrase isn't stored on the device "as is". It's encrypted with a key derived from your PIN via scrypt — a so-called memory-hard KDF. In plain terms: to brute-force the PIN, an attacker would have to spend significant memory and computation on every single attempt, which makes guessing extremely slow and expensive.
The derived key encrypts the phrase with AES-256-GCM — the modern industry standard that not only encrypts data but also verifies its integrity. Bottom line: even if someone gained access to your device's file storage, they could not extract the recovery phrase from it without your PIN.
The seed never sits in memory
Another quiet but important layer is unlock-to-sign. The recovery phrase isn't decrypted "at launch and forever" — it's decrypted only for the brief moment needed to sign a specific transaction. Immediately after signing, the decrypted data is discarded rather than left sitting in RAM.
The less time a secret exists in the clear, the smaller the window in which it can be intercepted at all. So the seed "comes alive" for a fraction of a second — just long enough to sign — and disappears.
PIN, biometrics and lockout
Sign-in and action confirmations are protected by a 6-digit PIN, and on supported devices — by biometrics (Face ID / Touch ID). After a series of failed attempts, a lockout kicks in — stopping automated code guessing.
Why 6 digits rather than 4? It's about entropy — the number of possible combinations. A 4-digit PIN has 10,000; a 6-digit one has a million. Combined with the attempt limit and memory-hard encryption, this turns PIN guessing into a task that simply doesn't pay off in practice.
Hardware-backed storage and screen protection
The wallet's encrypted data is stored in Keychain (iOS) and Keystore (Android) — the system's hardware-backed secure storage, not an ordinary app file.
On top of that, sensitive screens — wherever the recovery phrase or card details are shown — have screenshot and screen-recording protection enabled. This lowers the risk of the phrase leaking through spyware, screen sharing, or a stray screenshot in your gallery.
- Transactions are signed locally, on the device — the private key never leaves it.
- Card operations use 3D Secure — an additional payment confirmation step.
- The web version runs in preview mode; for larger amounts, use the app.
Straight answers to common questions
What happens if my phone is stolen?
To reach your funds, a thief would have to get past the PIN or biometrics, and the phrase itself is stored encrypted. Without your PIN it cannot be decrypted from the device's storage. After a series of failed attempts, the lockout engages.
Why is the web version a "preview"?
A browser is a less controlled environment than a native app with hardware-backed storage and screen protection. So the web is convenient for looking around and small operations, while the app is the safer place for larger amounts.
An honest word about your part
Strong cryptography protects the keys on the device, but it cannot protect against losing the recovery phrase itself. Since Tegro keeps no copy of it, nobody can restore access on your behalf. Write the phrase down offline, store it separately from the device, and never share it with anyone — not even "support". That is the part of security that stays with you.
Several independent layers — self-custody, scrypt + AES-256-GCM, unlock-to-sign, a PIN with biometrics, and hardware-backed storage — work together so that only you can control your funds. Calm, predictable, and free of loud promises.