> For the complete documentation index, see [llms.txt](https://docs.binkbtc.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.binkbtc.com/core-features/wallet-management.md).

# Wallet Management

### Understanding Your Bink Wallet

Bink uses Privy's embedded wallet technology to create a self-custodial wallet for you automatically when you sign up with your email address. This means you maintain full control of your funds while enjoying the simplicity of email login—no browser extensions, seed phrases, or complex setup required.

#### What is Self-Custody?

**Self-custody** means you—and only you—control your wallet's private keys. Neither Bink nor Privy can access your funds or make transactions on your behalf. Your assets are truly yours.

**Key Benefits:**

* Complete control over your funds
* No risk of platform freezing your assets
* Enhanced security through distributed key management
* Simple recovery options without managing seed phrases

### How Your Wallet Security Works

Bink uses advanced cryptography to keep your wallet secure while maintaining ease of use.

#### Key Splitting Technology

When your wallet is created, your private key is split into **three encrypted shares** using Shamir's Secret Sharing:

1. **Device Share** - Stored securely on your device
2. **Auth Share** - Encrypted and held by Privy, tied to your login method
3. **Recovery Share** - Encrypted with your recovery method (password or cloud storage)

**Important:** Any two of these three shares can reconstruct your private key. Each share alone reveals nothing and is useless without a second share. This means:

* Neither Bink nor Privy can access your full private key
* You can recover your wallet even if you lose your device
* Your keys are only reconstructed on your device when signing transactions

#### Secure Execution

All wallet operations happen in isolated, hardware-protected environments called **Trusted Execution Environments (TEEs)**. Your private key is only ever reconstructed within these secure spaces when you need to sign a transaction—never stored in full anywhere.

### Securing the recovery share

#### Automatic Recovery (Default)

By default, your recovery share is automatically encrypted and managed by Privy. Privy infrastructure ensures only the user can decrypt their recovery share on their device. This provides the smoothest experience:

**How it works:**

* Log in with your email on a new device
* Verify your identity
* Your recovery share is decrypted automatically
* Your wallet is provisioned on the new device

**Best for:** Most users who want the easiest experience

{% hint style="warning" %}
When using automatic recovery, you are trusting Privy’s infrastructure to secure the user’s recovery share, and the user’s authentication token as the sole root of trust for their wallet.
{% endhint %}

#### User-Managed Recovery

With user-managed recovery, the recovery share is encrypted via a recovery factor managed by the user. This takes two forms:

**Cloud-backup**

The recovery share is secured by a recovery decryption key that is backed up to the user’s cloud storage account (e.g. Google Drive or iCloud). Privy cannot access this backup and cannot decrypt the recovery share.

<mark style="background-color:yellow;">**To enable:**</mark>

1. <mark style="background-color:yellow;">Go to</mark> <mark style="background-color:yellow;"></mark><mark style="background-color:yellow;">**Account Settings**</mark> <mark style="background-color:yellow;"></mark><mark style="background-color:yellow;">></mark> <mark style="background-color:yellow;"></mark><mark style="background-color:yellow;">**Security**</mark>
2. <mark style="background-color:yellow;">Select</mark> <mark style="background-color:yellow;"></mark><mark style="background-color:yellow;">**Backup Wallet**</mark>
3. <mark style="background-color:yellow;">Choose your cloud provider (Google Drive or iCloud)</mark>
4. <mark style="background-color:yellow;">Authorize the connection</mark>
5. <mark style="background-color:yellow;">Your encrypted recovery share is stored in your cloud storage</mark>

<mark style="background-color:yellow;">**Benefits:**</mark>

* <mark style="background-color:yellow;">You control where your recovery share is stored</mark>
* <mark style="background-color:yellow;">Works even if Privy services are unavailable</mark>
* <mark style="background-color:yellow;">Can upgrade from password-based recovery</mark>
* <mark style="background-color:yellow;">No additional passwords to remember</mark>

<mark style="background-color:yellow;">**Best for:**</mark> <mark style="background-color:yellow;"></mark><mark style="background-color:yellow;">Users who want maximum control with minimal complexity</mark>

**Passwords**

Users can set a strong memorable password to secure the recovery share for their wallet. Privy has no knowledge of the user’s password and cannot decrypt the recovery share.

<mark style="background-color:yellow;">**To enable:**</mark>

1. <mark style="background-color:yellow;">Go to</mark> <mark style="background-color:yellow;"></mark><mark style="background-color:yellow;">**Account Settings**</mark> <mark style="background-color:yellow;"></mark><mark style="background-color:yellow;">></mark> <mark style="background-color:yellow;"></mark><mark style="background-color:yellow;">**Security**</mark>
2. <mark style="background-color:yellow;">Select</mark> <mark style="background-color:yellow;"></mark><mark style="background-color:yellow;">**Set Recovery Password**</mark>
3. <mark style="background-color:yellow;">Create a strong password (you'll need this to recover your wallet on new devices)</mark>
4. <mark style="background-color:yellow;">Confirm your password</mark>

<mark style="background-color:yellow;">**Important:**</mark> <mark style="background-color:yellow;"></mark><mark style="background-color:yellow;">You must remember this password. If you lose both your device and your password, your wallet cannot be recovered.</mark>

<mark style="background-color:yellow;">**Best for:**</mark> <mark style="background-color:yellow;"></mark><mark style="background-color:yellow;">Users who prefer complete control and are confident managing passwords</mark>

### Accessing Your Wallet on Multiple Devices

You can access your Bink wallet from any device by logging in with your credentials.

**First time on a new device:**

1. Open Bink and enter your email
2. Verify with the code sent to your email
3. Depending on your recovery method:
   * **Automatic:** Your wallet is provisioned automatically
   * **Cloud-based:** Authorize access to your cloud storage
   * **Password-based:** Enter your recovery password
4. Set up biometric authentication (Face ID/Touch ID) for this device

Once set up, you can use biometric authentication for quick, secure access on that device.

### Exporting Your Wallet

You always have the option to export your private key to use your wallet with other applications like MetaMask, even if Bink or Privy services are unavailable. This is your ultimate "escape hatch."

#### How to Export

1. Go to **Account Settings** > **Security**
2. Tap **Backup Wallet** or **Export Private Key**
3. Verify your identity (biometric or password)
4. Your private key or seed phrase will be displayed
5. **Securely save** this information offline (write it down or use a password manager)

> **Warning:** Anyone with access to your private key can control your funds. Never share it with anyone, and store it securely offline. Neither Bink nor Privy can export your wallet for you—only you have this ability.

**What you can do with your exported key:**

* Import it into MetaMask, Phantom, or other wallet apps
* Use your wallet independently of Bink
* Access your funds from any compatible wallet interface