Your security and privacy
are our priority

Trust Wallet is designed with security first. As a non-custodial wallet, your funds and private keys remain entirely under your control and are never stored on Trust Wallet servers. The app is built on the open-source Wallet Core library, holds ISO/IEC 27001 and ISO/IEC 27701 certifications independently verified by A-LIGN, and has been audited by leading security firms including CertiK, Cure53, Halborn, Kudelski Security and Quantstamp. As with any wallet, security also depends on your habits: protect your 12-word recovery phrase, verify the app's source and review transactions carefully before signing.

No crypto software is entirely free of security risks. Trust Wallet's non-custodial design means our servers do not hold users' funds or private keys, limiting exposure if an individual component is compromised. We continuously audit code, run public bug bounties and fix issues promptly. Most user losses stem from social engineering, such as sharing a 12-word recovery phrase, approving malicious contract transactions or installing a fake app. Trust Wallet's built-in Security Scanner helps flag known phishing domains and suspicious contracts before you sign.

No. Trust Wallet is non-custodial. Your private keys are stored locally on your device, encrypted and protected by biometrics and a PIN. Trust Wallet servers do not store or access them, so we cannot recover, freeze or transfer funds for you. Protecting your device and keeping your 12-word recovery phrase safe are essential.

You can restore your wallet on any device using your 12-word recovery phrase. Without it, no one — including Trust Wallet — can recover your funds. This is central to self-custody. Keep an offline backup of your recovery phrase, preferably on paper or metal, in a physically secure place. Never share it with anyone, including someone claiming to be Trust Wallet support. Official Trust Wallet support will never ask for your recovery phrase.

Yes. Trust Wallet has undergone multiple independent third-party security audits by CertiK, Cure53, Halborn, Kudelski Security and Quantstamp. Wallet Core, the open-source cryptographic library powering Trust Wallet, is publicly available on GitHub for community review. Auditing is ongoing; crypto security requires continuous maintenance rather than a one-time effort.

Trust Wallet holds ISO/IEC 27001 certification for information security management and ISO/IEC 27701 for privacy information management, independently verified by A-LIGN. These certifications demonstrate adherence to internationally recognized information security and privacy management practices.

Most crypto losses result from social engineering rather than technical vulnerabilities. Never share your 12-word recovery phrase; Trust Wallet support will never ask for it. Enable biometric authentication and a strong PIN. Check URLs before signing transactions — bookmark the official trustwallet.com website. Download Trust Wallet only from official app stores, such as the Apple App Store and Google Play, or directly from trustwallet.com/download, never from links sent in chats, emails or social media. Use the built-in Security Scanner to flag known phishing sites and malicious contracts. For larger balances, consider pairing Trust Wallet with a hardware wallet through the Ledger integration.