Early development

You own
everything.

Split is a wallet where no bank, no company and nobody else can freeze, borrow or move your money. And if you lose your phone, you still keep it.

Asynchronous signing

The phone doesn't have to be awake.

Most two-device wallets need both sides online at the same moment, so a locked phone or a dropped connection kills the transaction. Split signs in two separate steps. Your browser makes its half of the signature and sends the request, end-to-end encrypted. Your phone picks it up later, checks it and makes the other half. Neither half is a signature alone: without the phone, there is no signature.

  • Send now, co-sign later. The request waits for as long as it takes. On Solana it uses a durable nonce, so it does not expire.
  • No live session. Nothing is negotiated between the devices while you sign, so there is nothing to time out.
  • Pre-made signing material. The devices prepare one-time signing nonces in advance while both are online, then each signature costs a single message each way.
The extension waiting for the phone to sign a 0.50 ETH transfer
In plain words

Two of three. Never one.

Split is a wallet for digital money (Ethereum and Solana). Think of a safe that needs two of your three keys to open.

A bank can say no

It can freeze your account, delay a transfer or shut down. With Split there is no one to ask. Your money moves when you say so.

One password is a trap

Other wallets hang everything on a single secret. Lose it or get tricked and it is gone. Split never relies on one secret.

Two of three keys

Your phone, your computer and a backup file each hold a key. Any two open the safe, so losing one device is not a disaster.

The two parts

A browser extension and a phone app.

Each holds one share of the key and does a different job. A third share lives in a recovery kit you keep offline.

dApp any website request BROWSER EXTENSION · SHARE B Starts every signature Wallet, balances, connected sites Builds the transaction Makes its half, then broadcasts PHONE APP · SHARE A Finishes every signature Decodes what you are signing Face ID before it signs Makes the other half end-to-end encrypted RECOVERY KIT · SHARE C Encrypted file, kept offline rebuilds a lost share Ethereum · Solana signed transaction broadcast
How it works

One key that never exists in one place.

Split uses threshold signatures (FROST for Solana, threshold ECDSA for Ethereum). The shares are made together and the full key is never assembled, not at setup and not when you sign.

Install both

Add the browser extension and the phone app. Scan one QR code to pair them and compare a short code.

Make the key

The two devices run a key ceremony together. The phone then shows your recovery kit once.

Use it like any wallet

Connect to dApps from the browser. Every transaction is queued for your phone, which can be off or out of range.

Co-sign on the phone

The phone decodes the transaction itself, and only after you hold to confirm with Face ID does it produce its share of the signature.

Safety

What you see is what you sign.

The browser can be tricked. The phone decodes the raw transaction on its own and shows what it really does, so a malicious site cannot dress up a drain as a swap.

  • Host compromised? A stolen browser or a stolen phone alone cannot sign.
  • Unknown programs are refused on Solana unless you allow them.
  • End-to-end encrypted. Everything between your phone and your browser is encrypted on one device and opened only on the other.
Review on phone
1.25 ETH
To0x7a3f…c91e
NetworkEthereum
Siteapp.example.xyz
Fee~0.0006 ETH
Hold to sign
Features

Built to be boring where it counts.

The parts you rely on stay small and checkable.

No seed phrase

There is no twelve-word list to write down, photograph or phish.

Ethereum and Solana

Two chains, each with its own address and its own recovery kit. EIP-1193 and EIP-6963 for dApps.

Phone as the vault

Face ID or passcode gates the whole app, and every approval is a deliberate hold.

Key refresh

Rotate every share without changing your address, when you want a clean start.

Async by design

Both devices only need to be online together for setup and refills, never to sign.

One Rust core

The same signing core runs on your phone and in your browser, so both sides behave identically.

Lost your phone?
Same address.
New phone.
Browsershare B
Recovery kitshare C
Together2 of 3
Recovery

Lose a device. Keep the wallet.

Any two shares rebuild the third. Lose the phone and the browser plus the kit repair it. Lose the browser and the phone plus the kit do the same. Your address never changes and your funds never move.

  • The kit is encrypted with a passphrase you choose and is shown once.
  • A lost device can be retired so its share stops being useful.
The extension

Looks like a wallet. Signs like a vault.

Balances, sites and requests live in your browser's side panel. Every signature needs your phone.

Split wallet screen with balance and assets Transaction detail screen

Coming soon.

Split is in early development and not yet released.