Open app

A safe, not just a wallet.

Seven approvals before a coin moves.

The seven checks,one by one.

You pass them in order. Each one has to clear before the next one opens.

  1. Check 1 of 7

    Start

    Pick the token, the address and the amount. Nothing moves yet.

  2. Check 2 of 7

    Face ID

    Your face opens the signing screen.

  3. Check 3 of 7

    PIN

    A second secret, typed on this phone.

  4. Check 4 of 7

    Intent

    Read what will happen, then accept it.

  5. Check 5 of 7

    Trusted phone

    This phone approves it with its own key.

  6. Check 6 of 7

    Final review

    Four words. They must match what you saw.

  7. Check 7 of 7

    Password

    The last word is yours. Then it sends.

A new phonegets nothing.

Your password alone opens a read-only safe. Sending needs a phone you already trusted.

A thief getsless than you think.

Three things can be stolen. None of them moves a coin on its own.

  • Stolen phone

    Still shut.

    It needs your face, your PIN and your password before a coin can move.

  • Stolen password

    Reads. Cannot send.

    On another phone it opens a read-only safe. Send stays off.

  • Stolen 24 words

    Starts a 72-hour wait.

    Your old phone can cancel it. The words never spend.

×Recovery

Lost your phone?Recovery takes 72 hours.

The 24 words can't spend. They only start a clock, and your old phone can cancel it.

  1. 01Enter your 24 words.
  2. 02Wait 72 hours. Your old phone can cancel.
  3. 03Set a new password, PIN and phone.

×Trusted phone

A trusted phone,and your face.

A trusted phone is one you approved from a phone you already trust. Its key stays on it and never travels.

  1. 01Approve a new phone once, with its code and your PIN.
  2. 02Until then it can look, not send.
  3. 03Face ID is the first lock on every send: your face, not a password.

The app, on any screen

The Auro web app home screen: total balance $870.50 (5.00 SOL and 120.50 USDC), the Solana and USD Coin rows, a safe set-up checklist, the safe's status and the latest activity.
The Auro web app Send screen at step 6 of 7, Final review: four check words in a two by two grid and the plain sentence Send 0.1 SOL to 7xKX...gAsU, network fee 0.000005 SOL, nothing else.

×Emergency lock

One switch.Everything stops.

Lock blocks every send at once. Unlocking takes an hour, and needs your phone, PIN and password.

×Safeguards

Limits that onlyever get tighter.

Set a daily limit, a wait before a first send to a new address, and a wait on large sends. Tighter takes effect at once. Looser needs every check, then 24 hours.

All off until you turn them on.

×Spending rules

Rules a thiefcan't loosen.

Every rule is yours to set, with example values shown. Tighter takes effect now. Looser waits a day.

  • Daily limit, e.g.

    5 SOL

    Set a number, and a day's sends stop there.

  • New address wait, e.g.

    1 h

    If you set it, a first send to a new address waits.

  • Large send wait, e.g.

    24 h

    If you set it, big sends wait.

×Final review

Read it beforeyou sign it.

Auro turns the raw transaction into plain words. Four words must match on both screens.

  • Send0.1 SOL
  • To7xKX…gAsU
  • Network fee0.000005 SOL
  • New addresswaits 1 hour
  • lantern
  • harbor
  • anchor
  • violet

Nothing else moves.

×Activity

Every move,in plain words.

Sends and receipts are listed by day. A status shows only when a send waits, was cancelled or failed.

  • A waiting send can still be cancelled.
  • Tap any line for the fee and check code.

×Receive

Receiveand hold.

Share your address or let someone scan it. What arrives stays in your safe until you send it.

  • SOLSolana's own coin. Also pays network fees.
  • USDCUSD Coin, a dollar token on Solana.

Only send SOL or USDC on Solana.

Four numbers.Nothing hidden.

  • 7

    Approvals

    Every send passes seven checks, in order.

  • 72h

    To replace a phone

    A new phone waits three days. Your old one can cancel.

  • 1h

    New address

    If you switch it on, a first send to a new address waits an hour.

  • 24h

    Before looser

    Looser rules take a day to apply. Large sends can wait a day too.

Honest next tothe alternatives.

Where Auro is weaker, it says so.

QuestionAuroA normal phone walletA hardware wallet
Who holds the keyOur server holds a vault key for each account. You have to trust us.Your phone.The device, kept off the internet.
A stolen, unlocked phoneStill needs the PIN, the password and the other checks.Can often send straight away.Nothing alone. The device must confirm.
A stolen passwordNot enough. A send also needs your trusted phone.Depends on the wallet.Nothing alone. The key stays on the device.
Lost phone and lost 24 wordsNobody can help.Nobody can help.Nobody can help.
Approval steps per sendSeven.Often one tap.One confirm on the device.
Cost to set upNo hardware to buy.No hardware to buy.A device to buy.
Code riskNo smart contract, but our server code can have bugs.App bugs, and approvals you sign.Device and app bugs.
Where it runs todaySolana devnet only: test coins.Mainnet.Mainnet.

×Under the hood

Plain wordsfor how it works.

  1. 01Each account gets its own vault wallet on Solana. Its key is made on our server and never touches your phone.
  2. 02Your phone sends a request. It drops past seven gates.
  3. 03Every gate checks the same transaction fingerprint. The vault signs only if all seven pass.
  4. 04No smart contract, so nothing to deploy and no contract to attack. The vault pays its own network fee. Your 24 words never spend.

No safe is magic.

  • A hacked phone can still approve what you tap.
  • Someone talking you into a send can still win.
  • Our own code can have bugs.
  • Lose your phone and your 24 words, and nobody can help.
How Auro really works

×Status

Where Auro is today.Devnet, not mainnet.

Auro works on a test network. It has not been audited.

  1. Devnet now

    Live

    Live with test coins only. No real money.

  2. Audit

    Not done

    Not done yet. Real money waits for it.

  3. Mainnet

    After the audit

    Only after the audit. No date.

  4. Native apps

    Open question

    Not built. The web app is all there is today.

Questions.

Who holds my funds?

Your SOL and USDC sit in your own vault address on Solana. Auro holds that vault's signing key and only uses it after all seven checks pass on your trusted phone.

Why no smart contract?

Deploying one costs fees that would land on you. The rules run on Auro's servers instead, and every move is on-chain for anyone to check.

What can I hold?

SOL and USDC at launch.

What does a send cost?

Solana's network fee, usually a fraction of a cent. A first USDC send to a new address also pays a small one-time account deposit.

What if someone gets my password?

They see a read-only safe. Sends need your face, your PIN and your trusted phone's own key.

What if I lose my phone and my 24 words?

Then the app can't recover your safe. Write the words down and keep them away from your phone.

Security before speed.

Open app