A Solana wallet you actually understand
The interactive wallet runs at /app (client-side only). This page explains the security model in crawlable HTML.
Keys stay on your device
Generation, signing, and encrypted backup use the browser's Web Crypto and Solana libraries in your tab. Ship x402 does not run a database of private keys.
What you must write down
- Public address — share to receive funds; save in notes or contacts.
- Private key (base58) — never share; required to reopen after lock, refresh, or a new device. Phantom/Solflare can import this format.
- Optional encrypted backup — password-protected
.enc.json(PBKDF2 + AES-256-GCM) for multi-device restore without pasting the raw key every time.
Session model
- Unlocked key lives only in tab memory
- Auto-lock after idle / background
- Network preference may persist; secrets never do
Honest limits
Browser wallets cannot stop malware or phishing. Keep mainnet balances modest; use hardware wallets for serious savings. Practice on Devnet first.