Frequently askedquestions.

A cryptocurrency wallet is a secure digital tool that holds the cryptographic keys required to access and manage your assets on a blockchain. It functions like a bank account, but without the bank — you hold the keys, you control the assets. With Vaulnox, you manage everything from a single app while retaining full ownership of your funds.

Yes. Your assets are secured by Vaulnox Asset Protection MPC, which splits your private key into three encrypted shares. No single share — on your device, in our SGX enclave, or in your encrypted backup — can access funds alone. The SENTINEL policy engine adds a second layer, blocking unauthorized transactions before they can ever sign. The result: protection that holds up against device theft, phishing, hacking, and far worse.

No. Unlike traditional wallets that rely on a 12- or 24-word seed phrase, Vaulnox uses MPC key shares. There is no seed phrase to memorize, write down, or risk losing. Your device share is protected by your biometrics and passcode.

Download the Vaulnox app, create your account, and complete any required identity verification. Your wallet is set up automatically through Vaulnox Asset Protection MPC — no manual key generation, no seed phrases. You can begin receiving, sending, and managing assets right away.

Vaulnox runs on iOS and Android phones and tablets, with web access for account management. The device share lives inside your phone’s hardware-rooted Secure Enclave (Apple) or equivalent Trusted Execution Environment (Android). See the download page for the latest builds.

Your wallet runs on one active device at a time. If you replace or upgrade your phone, you migrate access through Key Share Restoration: your backup share and the Fireblocks-Dynamic share re-derive a fresh device share on the new phone, and the previous device is retired. The 2-of-3 MPC architecture intentionally prevents two simultaneous device shares.

Your funds remain safe. The device share alone cannot move assets. You can restore access on a new device through Key Share Restoration, which uses Proactive Secret Sharing (PSS) to derive a fresh device share from your remaining shares — subject to the cooldowns and identity checks you set during AEGIS. No seed phrase to find, no hardware to replace.

Exchanges are custodial — they hold your keys and control your assets. Vaulnox is non-custodial: you retain control of your key shares at all times. Your assets cannot be frozen, seized, or accessed by Vaulnox. You get true ownership with a user experience as smooth as any exchange.

The 2-of-3 MPC design makes hacking extraordinarily difficult. An attacker would need to compromise two independently secured key shares simultaneously — one inside an Intel SGX enclave operated by Fireblocks-Dynamic, one on your device’s Secure Enclave, or your own encrypted backup. The SENTINEL policy engine — itself running inside a hardware-isolated TEE built by Scytalex — evaluates every transaction request in real time, making unauthorized movement effectively impossible.

No. Vaulnox is designed for every experience level. The cryptography runs silently in the background; you interact with a simple, intuitive interface for sending, receiving, and managing assets.

Yes. You must be at least 18 years old to use Vaulnox services, as outlined in our Customer Service Agreement.

SENTINEL is a rules-based enforcement layer that evaluates every transaction request in real time, inside a hardware-isolated TEE built for Vaulnox by Scytalex, the world leader in trusted-execution-environment systems. It runs before the cryptography — no signature is generated unless every rule you’ve defined is satisfied. You can configure spending limits, recipient whitelists, velocity checks, geofencing, and anomaly detection. It’s your second wall against malware, social engineering, and unauthorized approvals. Explore the policy engine →

AEGIS is the private setup process where you configure your SENTINEL policies — spending limits, approval thresholds, inheritance triggers, threat protocols, recovery rules, and Trusted Contacts. Your answers travel from your device to a quantum-proof server that compiles your configuration. Plaintext never leaves your device. Vaulnox sees only that a configuration exists, not its contents. See how AEGIS works →

You designate trusted heirs during AEGIS and choose how the protocol activates. Vaulnox supports four trigger types: a verified Medical Event (death or certified incapacity), an Inactivity timer, an Age-based trigger (using a date of birth stored only inside AEGIS), or a fixed Date-based trigger. A configurable cooling period (14–365 days, default 30) gives you a chance to cancel. You also choose whether a death certificate is required and whether heir KYC is required. When the trigger fires and all checks clear, SENTINEL facilitates a secure transfer of assets — without exposing your private keys, and without probate delays.

If you experience an Event of Duress — coercion, extortion, or a legal seizure attempt — you can activate your Threat Protocol. Two modes are available: Total Lockdown, which blocks every outgoing transaction, or Threshold Approval Mode, which lets small transactions flow normally while large ones require co-approval from a designated Trusted Contact. You define the activation trigger and the mode during your AEGIS interview.

Trusted Contacts are people you designate during AEGIS to act as a second factor in specific situations — co-approving large transactions, releasing a duress lockdown, or assisting with key share recovery. They never see your balances, never receive your shares, and never act unilaterally. SENTINEL only invokes them under the exact conditions you’ve set.

Yes, subject to any cooldown period or other restrictions you may have originally configured with AEGIS. You can revisit AEGIS to update your SENTINEL rules, add or remove heirs, change Trusted Contacts, or adjust thresholds. Updates flow through the same end-to-end-encrypted channel; your plaintext answers never leave your device.

Yes. SENTINEL supports fully configurable Approval Thresholds. You can define amounts above which transactions require additional authentication, multi-party co-approval from Trusted Contacts, or built-in time delays before execution.

SENTINEL is engineered for high availability, and the policy engine is regionally distributed. If the policy engine is genuinely unreachable, transaction requests are held rather than auto-approved — the security guarantee is that no transaction signs without policy evaluation. Your assets are never at risk; only the timing of an outbound transaction is affected.

Key Share Restoration recovers access on a new device using your remaining MPC shares; you stay inside the Vaulnox system and the 2-of-3 model is preserved. Full Key Restoration assembles the complete private key and recovery material so you can leave Vaulnox and import your wallet into any standard provider. Both flows are policy-gated, with cooldowns and identity verification you set during AEGIS.

No. The AEGIS Confidential Interview is end-to-end encrypted from your device to a dedicated quantum-proof server that compiles your configuration. Vaulnox sees that a configuration exists — not its contents. We do not see your spending limits, your inheritance triggers, your Trusted Contacts, or which specific rule blocked a given transaction.

No. Heir details and Trusted Contact identities are encrypted inside AEGIS. They are surfaced only when SENTINEL invokes them under the exact conditions you set — e.g., when an inheritance trigger fires and the cooling period clears.

No. The backup share is sealed with quantum-proof encryption on your device before it is uploaded. Google sees an opaque encrypted blob. Without your other two shares and your device’s key material, the backup is cryptographically inert.

Vaulnox sees the metadata required to operate the service — the existence of transactions, the chain, and SENTINEL’s attestation that policy was satisfied. Your wallet activity is also visible to anyone on the public blockchain. Vaulnox does not share or sell this data; see our Privacy Policy for full details.

A Wyoming Decentralized Autonomous Organization LLC is a state-recognized legal entity whose decisions are executed algorithmically. Vaulnox offers DAO LLCs for treasuries, family entities, funds, and operating companies that want confidential decision-making with cryptographic enforcement. Learn more →

Decisions are effected through the SENTINEL policy engine rather than by traditional voting or written consent of members or managers. Authorized decision-makers approve a proposal under your governance rules; SENTINEL evaluates the rules, records the decision in the secure enclave, and produces an attestation report that anyone can verify on the Vaulnox site — without revealing who authorized the decision.

Wyoming Execution Agents, LLC, a Vaulnox partner. The Authorized Signatory can execute on behalf of the DAO LLC only when presented with a valid SENTINEL attestation. They have no independent authority over your assets.

No. Wyoming DAO LLC filings do not disclose decision-makers, and Vaulnox does not surface their identities. Governance rules are enforced cryptographically, and attestation reports prove a decision was authorized without revealing who authorized it.

Yes. Vaulnox partners with trusted third-party providers to enable fiat on-ramping — buying crypto with a bank account or card — directly within the app. Availability may vary by region and provider, and partner fees apply.

Yes. Off-ramping (converting crypto to fiat) is available through our partner integrations. You can sell digital assets and withdraw proceeds to a linked bank account, subject to provider terms and regional availability.

Yes. Crypto-to-crypto swaps run inside the Vaulnox app through our routing partners, with the same SENTINEL policy enforcement applied to every outgoing leg.

A small Vaulnox service fee applies to buy, sell, and swap transactions, and it’s always shown as a line item before you confirm. Fees vary by payment method: bank transfers carry the lowest fees, while cards and instant rails cost a little more for the convenience. Third-party partner processing fees may also apply and are disclosed at checkout.

Coming soon. Visa and Mastercard debit and credit card programs are in the works through partner issuers, but they are not yet available. We’ll announce regional availability, issuer, and fees on the Wallet Services page when the program launches.

Coming soon. Outbound bill pay and transfers are in the works through partner rails, with full SENTINEL policy enforcement applied to every outgoing transaction. We’ll announce regional availability and partner fees on the Wallet Services page when the service launches.

Hardware wallets store a single private key on a physical device. Secure in principle, but vulnerable to loss, damage, or theft of that device — and irrecoverable if it’s destroyed without a seed backup. Vaulnox’s MPC model distributes key material across three independent locations, eliminating the single point of failure while providing the same non-custodial guarantees — without requiring you to carry or protect additional hardware.

The consumer MetaMask wallet uses a single private key derived from a 12-word seed phrase, encrypted locally in your browser extension or mobile app and decrypted with your password. Two failure modes follow: if your device is compromised — through malware, a malicious extension, or a phishing prompt that captures your password — the attacker can extract the key and drain your funds; and if you lose the device without having backed up the seed phrase, the funds are gone for good. Vaulnox’s 2-of-3 MPC architecture removes both: no single party ever holds a complete key, compromising any one share reveals nothing, and recovery doesn’t depend on a piece of paper you wrote down once. (MetaMask has shipped MPC technology — Embedded Wallets — but it’s a developer SDK for dapp builders, not the consumer MetaMask wallet most users have installed.)

Most MPC wallets focus on key splitting alone. Vaulnox pairs Fireblocks-Dynamic 2-of-3 MPC with the Scytalex-built SENTINEL policy engine, the AEGIS Confidential Interview, true Key Share Restoration, Full Key Restoration for portability, and protocols for inheritance, duress, and algorithmic governance — all in a single consumer-grade app.