Safer by default
bWalletX protects you without asking you to be an expert. You see exactly what you approve, sites never touch the wallet’s own keys, and apps can only spend what you set aside for them. It works with every BRC-100 app.
What you see is what you grant
Every approval sheet shows every line it grants, amounts in dollars first. Each request gets its own sheet. A site’s full address is always shown, so a look-alike like tokenblaster.com.ab1.io can never pass for the real thing.
Envelopes for apps
Let an app pay small amounts without asking by giving it an envelope. It can spend only what fits, the money stays in your wallet until each payment, and forgetting the app returns the rest. Signing in never sets up spending.
The wallet's keys stay the wallet's
The keys bWalletX uses for itself, including those behind bTrust, are never offered to outside apps. Nothing is pre-ticked for you.
Sign in and pair with a code
Sign in with bWalletX asks you to type the code the site shows, and pairing your phone compares an 8-digit code over our own relay. Each pairing keeps its own permissions, and Disconnect removes them.
Your password, your words
Changing your password needs your current one, Face ID or your 12 words. Passwords are protected by a strong 600,000-round key, and on the web your unlock stays in memory only. Recovery words never leave your device in a report or an Ask b chat.
A bounty pool you can watch
Find a hole and get paid in BSV through b-Aware. The bounty pool is live from the chain: what’s left this quarter, what’s been paid, and a link to every payout.
Live today, 30 Oct 2026
- ✓ Every line shown; dollars first; full site addresses (5.2.41)
- ✓ Envelopes for apps; sign-in never stores spending (bWalletX editions)
- ✓ Wallet's own keys refused to outside apps (5.2.35)
- ✓ Sign-in match code; 8-digit pairing; per-pairing permissions
- ✓ Password change needs proof; 600k-round password key
- ✓ Live bounty pool at /bounties