LIVE ON XX NETWORK MAINNET

The xx network,
in your pocket.

A phone-first, non-custodial wallet. Your keys are generated and held on your own device — quantum-ready by default. Accounts, transfers, full staking, full governance, native multisig. No backend of its own. No trackers. No ads.

no app store · no download · it lives at mobile.xx.network

The one we never showed you

Look at the last tab.

Through thirteen countdown screens it said Settings. Settings moved to a gear — because the last tab belongs to Memos: private, end-to-end encrypted memos between wallet holders, carried over the xx mixnet. Not a messenger bolted onto a wallet — the secure channel a wallet was always missing.

  • Built for coordination, not conversation. Memos exists so people who move funds together can settle the details — confirm an address, agree an amount, line up a transfer — without stepping outside the wallet or leaking it to a group chat.
  • Multisig's missing piece. Send a proposal's call data straight to your cosigners over the mixnet. The receiving wallet re-verifies it against the on-chain call hash before anyone signs — the memo is transport, never instruction.
  • Metadata-shredding by design. Memos travel through cMix, the xx network mixnet, so no server ever sees who is talking to whom, or when.
  • No account. No phone number. No server. Your history lives on your device and nowhere else.
  • Unlinkable identities. Every wallet account gets its own messaging identity — your accounts can't be connected to each other through your memos.
  • Deliberately simple. One-to-one only: no groups, no feeds, no noise. And a double checkmark means the recipient's device actually received it. Yes — it's also a perfectly good way to just say hello, as privately as it gets.
Memos tab — private memos between wallet holders
An end-to-end encrypted memo thread with delivery receipts
Wallet dashboard
DashboardTransferable, reserved, frozen — live. Send and receive one tap away.
Account switcher
Every account, one screenStandalone accounts, Ledger, and multisigs side by side, balances included.
Add account options
Create, import, or LedgerSleeve quantum-ready phrases, keystore import, or a hardware key that never touches the browser.
Confirmed transfer
Transfers, done rightKeep-alive sends so you can't accidentally reap your own account.
Transaction detail
The whole receiptBlock, era, extrinsic, fee, full hash. One tap to the explorer.
Staking — not nominating
Staking that talks to youNot nominating? It says so, plainly — and tells you exactly what to do next.
Auto-recommended validators
A balanced validator set in secondsThe wallet runs the network's own election locally, then ranks by projected reward. Or hand-pick your own sixteen.
Staking review with unbonding warning
No surprisesThe 28-day unbond is shown before you sign — not discovered after.
Active nomination status
Your position, per eraEach nominated validator's status — earning, inactive, waiting — updated live.
Manage stake options
The whole lifecycleAdd to stake, change validators, stop nominating, unbond — or register a validator.
Governance hub
Govern from your pocketBounties, democracy, council, treasury — read everything, then vote, second, delegate, or propose.
Two-device approval setup
Two devices to spendA protected account: three keys, any two approve. Enforced on-chain, not by a popup.
Protected account detail with cosigner messaging
See exactly who can signSigners, threshold, cosigner memos over the mixnet — names always beside the real address.
Add multisig options
Multisig, no middlemanGuided two-device protection, build-your-own, import, or scan the chain.
New memo account picker
Memo as any accountEvery account has its own messaging identity — pick who you reach out as. Unlinkable by design.
Settings with app lock and privacy
Locked down, your wayBiometric app lock, auto-lock, PIN — and a privacy toggle for every outbound indexer query.
What's inside

Everything a day-to-day xx user needs. From a phone.

Quantum-ready from word one

New wallets are generated with the audited Sleeve reference: a standard phrase for daily use plus a quantum-secure master phrase — created entirely in-browser, with zero network calls.

📈

The full staking lifecycle

Bond, nominate in one signature, manage a position, unbond with the 28-day lock shown up front — or run a validator end to end, commission and cMix node identity included.

🏛

Governance, whole

Every Gov1 surface, readable and actionable: vote with conviction, second, delegate, propose treasury spends and bounties — consolidated for mobile.

✍️

Multisig you can read

Proposals decoded locally from the on-chain bytes — never from a description someone supplied. Share call data by mixnet, QR, file, or paste. No central server anywhere.

🔐

Real 2FA for savings

Turn multisig into a second factor: a protected account that needs a second device to approve any spend, with an offline backup key. Enforced by the chain itself.

🔑

Ledger support

Hardware accounts whose key never enters the browser — with mandatory on-device address confirmation. Desktop Chromium and Android Chrome over USB.

💬

Memos — secure coordination

Direct, end-to-end encrypted memos to other wallet holders over cMix — confirm addresses, coordinate transfers, pass multisig call data. One-to-one by design.

🛡

Private by configuration

Optional app lock (PIN + biometrics). An indexer-privacy toggle that turns off every outbound query without breaking your ability to sign and move funds.

📲

An installable PWA

Add it to your home screen and launch it like a native app. Works offline once installed — new-account generation included.

A note on trust

Adds as little new trust as possible.

The wallet leans on primitives the xx network already provides — not a new server, not homegrown cryptography.

Non-custodial, no backend

Keys are generated and encrypted on your device. The wallet talks to public xx network infrastructure — it operates no server of its own.

Decoded, never described

Multisig calls, governance preimages, and proposals are decoded locally from on-chain bytes. What you sign is what the chain will execute.

Names never hide addresses

Friendly labels always appear beside the real address fragment — a label can never disguise where funds go.

Audited foundations

Account generation uses the audited Sleeve reference. Memos ride the xx network's cMix protocol. Same chain, same foundation tools.

No telemetry, no ads

Nothing is tracked, measured, or sold. There is nothing to opt out of.

Open source

The code is public and inspectable — see for yourself.

Get it

No app store. Thirty seconds.

01 · VISIT

Open mobile.xx.network

In your phone's browser — Chrome on Android, Safari on iPhone. Nothing to download, nothing to sideload; the wallet is served as a website and runs entirely on your device.

02 · INSTALL

Add to home screen

Android: menu (⋮) → Add to home screen. iPhone: Share → Add to Home Screen. It gets its own icon and a full-screen window — and keeps working offline from then on.

03 · CREATE

Make your first account

Generate a fresh quantum-ready wallet with Sleeve, import an existing recovery phrase or wallet.xx.network keystore, or connect a Ledger over USB.

04 · SECURE

Back it up, lock it down

Write both recovery phrases somewhere safe and offline — shown once, stored never. Then, if you like, turn on the app lock (PIN or biometrics) in Settings.

Why isn't it in an app store?

A PWA installs straight from the web — no store account, no gatekeeper between you and your wallet. Same app, fewer middlemen.

Does it work on iPhone?

Yes — install via Safari's Add to Home Screen. (Ledger over USB is desktop and Android only; iOS doesn't expose the APIs.)

What if I lose my phone?

Your recovery phrases restore every account on a new device. A protected account stays safe even then — one device alone can never spend.