Security

Your wallet key stays protected.

Imutabl stores your wallet key encrypted. Your PIN unlocks signing for 5 minutes when you choose an onchain action. Wallet backup lets you secure that PIN with a recovery code.

Wallet model

Encrypted at rest

Private keys are encrypted with PIN-based encryption before storage.

Temporary in use

Keys are only decrypted briefly in memory for user-approved signing.

Not publicly exposed

Only wallet addresses and blockchain transactions are public by design.

No raw private key storage

Imutabl does not store your wallet private key in plain text. When a wallet is created, the key is encrypted before it is saved.

Your PIN unlocks signing

Your wallet PIN is required before transactions can be signed. One correct PIN keeps the wallet unlocked for 5 minutes.

Wallet backup

In Settings → Wallet you can secure your PIN with a recovery code. Your account password is required before you can manage that backup. The code shows your PIN. It is not your private key. A new code, or a PIN change, makes the old code stop working.

Short-lived wallet sessions

After you unlock your wallet, Imutabl creates a temporary signing session that lasts 5 minutes. It is used only for actions you confirm.

Limited operational access

Imutabl systems use keys only when needed to complete actions you request, such as minting, collecting, listing, or transferring. We do not expose private keys to staff dashboards or public APIs.

What Imutabl can see

Imutabl can see normal account data needed to run the product, such as your email, username, profile details, wallet address, posts, and app activity. Your wallet address and on-chain transactions are public on the blockchain, independent of Imutabl.

What Imutabl cannot casually access

We do not store your raw private key, publish it, or make it available to our team. Signing needs your signed-in account and your wallet PIN. A backup recovery code can show that PIN back to you. It cannot be used as the private key. Managing backup also requires your account password.

Your responsibilities

Keep your account password, wallet PIN, and recovery code private. Imutabl will never ask you to send your private key, PIN, or recovery code in chat, email, social media, or support messages.