xx wallet / mobile
07 · 23 · 2026
LAUNCHING JULY 23 · 10:00 AM PACIFIC

The xx network,
in your pocket.

A phone-first, non-custodial wallet. Your keys generated and held on your own device — quantum-ready by default. Accounts, transfers, full staking, full governance, native multisig. No backend of its own. No trackers. No ads.

--
days
--
hours
--
min
--
sec

no app store · no download · it lives at ██████████████

First — about the date

We said tomorrow. We're taking two more weeks.

Nothing slipped. Everything the countdown showed — all thirteen screens — is built and running on live mainnet today.

But there's a fourteenth screen the countdown never posted. It's just below. It's brand new — private, end-to-end encrypted memos between wallet holders, carried over the xx mixnet — and it's exactly the kind of thing we refuse to ship at 90%. A wallet is the last place to rush a first impression, so the first version gets the time it needs to work the way it should.

The date moves once, and it moves for a reason: July 23, 10:00 AM Pacific. The clock above is honest.

↓ see what the extra days are for
The one the countdown never showed

Look at the last tab.

Through thirteen countdown screens it said Settings. Settings moved to a gear — because the last tab belongs to Memos: private, end-to-end encrypted memos between wallet holders, carried over the xx mixnet. Not a messenger bolted onto a wallet — the secure channel a wallet was always missing.

  • Built for coordination, not conversation. Memos exists so people who move funds together can settle the details — confirm an address, agree an amount, line up a transfer — without stepping outside the wallet or leaking it to a group chat.
  • Multisig's missing piece. Send a proposal's call data straight to your cosigners over the mixnet. The receiving wallet re-verifies it against the on-chain call hash before anyone signs — the memo is transport, never instruction.
  • Metadata-shredding by design. Memos travel through cMix, the xx network mixnet, so no server ever sees who is talking to whom, or when.
  • No account. No phone number. No server. Your history lives on your device and nowhere else.
  • Unlinkable identities. Every wallet account gets its own messaging identity — your accounts can't be connected to each other through your memos.
  • Deliberately simple. One-to-one only: no groups, no feeds, no noise. And yes — it's also a perfectly good way to just say hello, as privately as it gets.

Ships with the wallet · July 23 — we're spending the runway making sure the first version works the way it should.

Memos tab — private memos between wallet holders
An end-to-end encrypted memo thread with delivery receipts
The countdown so far

Thirteen screens. Counted down.

Every screen from the countdown — captured on live mainnet.

Wallet dashboard
#13DashboardTransferable, reserved, frozen — live. Send and receive one tap away.
Account switcher
#12Every account, one screenStandalone accounts and multisigs side by side, balances included.
Add account options
#11Create, import, or LedgerSleeve quantum-ready phrases, keystore import, or a hardware key.
Confirmed transfer
#10Transfers, done rightKeep-alive sends so you can't accidentally reap your own account.
Transaction detail
#9The whole receiptBlock, era, extrinsic, fee, full hash. One tap to the explorer.
Staking status
#8Staking that talks to youBonded but not earning? It says so, plainly — and tells you what to do next.
Nominate validators
#7A balanced validator set in secondsAuto-recommend from live chain data — or hand-pick your own sixteen.
Governance hub
#6Govern from your pocketBounties, democracy, council, treasury — read everything, then participate.
Two-device approval
#5Two devices to spendA protected account: three keys, any two approve. Enforced on-chain.
Multisig detail
#4See exactly who can signSigners, threshold, history — names always beside the real address.
Add multisig options
#3Multisig, no middlemanGuided two-device protection, build-your-own, import, or scan the chain.
Pending actions
#2Nothing waits in silenceAnything awaiting your signature surfaces the moment it needs you.
Settings and app lock
#1Locked down, your wayBiometric app lock, auto-lock, PIN, your choice of RPC endpoint.
What's inside

Everything a day-to-day xx user needs. From a phone.

⚛

Quantum-ready from word one

New wallets are generated with the audited Sleeve reference: a standard phrase for daily use plus a quantum-secure master phrase — created entirely in-browser, with zero network calls.

📈

The full staking lifecycle

Bond, nominate in one signature, manage a position, unbond with the 28-day lock shown up front — or run a validator end to end, commission and cMix node identity included.

🏛

Governance, whole

Every Gov1 surface, readable and actionable: vote with conviction, second, delegate, propose treasury spends and bounties — consolidated for mobile.

✍️

Multisig you can read

Proposals decoded locally from the on-chain bytes — never from a description someone supplied. Share call data by mixnet, QR, file, or paste. No central server anywhere.

💬

Memos — secure coordination

Direct, end-to-end encrypted memos to other wallet holders over cMix — confirm addresses, coordinate transfers, pass multisig call data. One-to-one by design.

🔐

Real 2FA for savings

Turn multisig into a second factor: a protected account that needs a second device to approve any spend, with an offline backup key. Enforced by the chain itself.

🔑

Ledger support

Hardware accounts whose key never enters the browser — with mandatory on-device address confirmation. Desktop Chromium and Android Chrome over USB.

🛡

Private by configuration

Optional app lock (PIN + biometrics). An indexer-privacy toggle that turns off every outbound query without breaking your ability to sign and move funds.

📲

An installable PWA

Add it to your home screen and launch it like a native app. Works offline once installed — new-account generation included.

A note on trust

Adds as little new trust as possible.

The wallet leans on primitives the xx network already provides — not a new server, not homegrown cryptography.

Non-custodial, no backend

Keys are generated and encrypted on your device. The wallet talks to public xx network infrastructure — it operates no server of its own.

Decoded, never described

Multisig calls, governance preimages, and proposals are decoded locally from on-chain bytes. What you sign is what the chain will execute.

Names never hide addresses

Friendly labels always appear beside the real address fragment — a label can never disguise where funds go.

Audited foundations

Account generation uses the audited Sleeve reference. Memos ride the xx network's cMix protocol. Same chain, same foundation tools.

No telemetry, no ads

Nothing is tracked, measured, or sold. There is nothing to opt out of.

Source at launch

The full source code publishes when the wallet does — open and inspectable, so you can check the math yourself.

When it lands

No app store. Thirty seconds.

On July 23 this is all it will take:

01 · VISIT

Open ██████████

In your phone's browser. Nothing to download, nothing to sideload. The address drops here at 10:00 AM Pacific.

02 · INSTALL

Add to home screen

Android: menu (⋮) → Add to home screen. iPhone: Share → Add to Home Screen. It gets its own icon and works offline from then on.

03 · CREATE

Make your first account

Generate a quantum-ready wallet, import an existing phrase or keystore, or connect a Ledger.