Skip to content

Security: git-wallet/gitwallet

Security

SECURITY.md

Security Policy

GitWallet is a non-custodial wallet: your seed phrase and private keys never leave your device and are never sent to any server. Security is our top priority.

Reporting a vulnerability

If you discover a security issue, please report it privately — do not open a public issue.

We aim to acknowledge reports within 72 hours and will keep you updated on the fix. Responsible disclosure is appreciated — give us reasonable time to patch before any public disclosure.

Good to know

  • GitWallet never asks for your secret phrase or private keys. No one from GitWallet will ever ask for them.
  • The app has no account and no password recovery — your secret phrase is the only backup. Keep it offline and private.
  • Always download the app from an official source: gitwallet.net or APKPure.

There aren't any published security advisories