Wallet entropy and recovery words are created or imported on the device.
Security
Zero knowledge is an architectural constraint, not a slogan.
Your deviceKeys and signing
Recovery phrasePasscodeBiometricsSigned transaction
Control surface
The security model should be legible from the interface.
Passcode and biometrics gate the app without creating a ColdHarbor account.
Transaction authorization happens locally after a human-readable review.
Relay and node status remain visible. A rejected payment is never shown as sent.
ColdHarbor cannot recover
Your passcode, seed phrase, or lost wallet.
Self-custody removes the provider recovery path. A verified offline backup is part of the security model.
You still protect
Your device, backup, destination, and transaction review.
No interface can protect funds from an exposed phrase or an approved malicious destination.