How your keys are protected
BESC Wallet is self-custody: you hold your keys, and BESC can't move your funds. Here's exactly what stays on your phone and what the BESC service sees.
What stays on your phone
| Item | Where it lives |
|---|---|
| Recovery phrases | Encrypted, in your phone's secure storage |
| Private keys | Encrypted, in your phone's secure storage |
| App passcode | Only a salted hash, in your phone's secure storage (the code itself is never stored) |
Secure storage is the Keychain on iPhone and Android Keystore-backed encrypted storage on Android, the same places your phone keeps its own passwords. Recovery phrases and keys are created on your phone and never leave it, except in the one case below that you choose yourself.
What the BESC service sees
To show history, prices, Holder Score and more, the app talks to BESC's service. It sends:
- your public wallet addresses, which are public on the blockchain anyway
- signatures that prove you own a wallet. Signing a sign-in message proves ownership without revealing your key, and can't be used to move funds.
- transactions you've already approved, so they can be broadcast and tracked
It never needs your recovery phrase or private key.
How sign-in works
When you open the app, BESC Wallet signs you in to its service automatically using a wallet you control:
The app only signs a message that is exactly a fresh BESC sign-in for that address. It refuses anything else, so this background step can't be used to sign something different.
The one exception: bots and Auto-copy
Server-run bots and Auto-copy trade while your phone is off, so they need a wallet whose key BESC's servers hold. You choose which:
- A separate bot wallet (recommended): a new wallet just for bots, so your main key never leaves your phone.
- An existing wallet: only if you explicitly choose Use this wallet instead, after a clear explanation.
Nothing else in the app ever uploads a key. See Your bot wallet.
Your part
Self-custody means you're in control, and responsible:
- Back up your recovery phrase on paper, offline.
- Lock the app with a passcode or biometrics.
- Read Staying safe.