SafePal is a free wallet app for Android and iPhone with a companion browser extension for Chrome and Edge. It holds coins on Bitcoin, Ethereum, Solana, Tron and dozens of other networks, and has swaps, purchases and an IBAN account with a payment card built in. The company started in 2018 as a hardware wallet maker; this review covers only the app and the extension.

SafePal says the wallet is self-custody: the keys stay on your device and SafePal cannot move or freeze your coins. The app’s code is not public and no independent audit has checked that claim. SafePal’s privacy policy says it may collect your wallet addresses, transaction history and IP address, and the app offers neither Tor nor a way to use your own node for its main networks. On Bitcoin, Ethereum and every other network in the app, transactions are public on the blockchain for anyone to read.

Who Holds the Keys

When you create a wallet, the app generates a seed phrase of 12 or 24 words in the BIP39 standard and shows it on your phone; the extension does the same in your browser and asks you to tap the words back in order. A six-digit security password unlocks the app, approves each payment and opens the phrase again later under Settings. SafePal’s help centre says any other BIP39-compatible wallet can restore your coins from the phrase, so you are not tied to SafePal if the company stops supporting the app.

You can add a passphrase of up to 60 characters, which opens a separate hidden wallet; it is not stored anywhere, and a lost passphrase means the coins behind it are gone. SafePal keeps no copy of your phrase or password and cannot freeze an address. If you lose the phrase and have no backup, nobody, including SafePal, can recover your coins. The app has no multisig.

The Cloud Backup

The phone app offers an optional backup of the seed phrase to your own iCloud or Google Drive. SafePal says the app encrypts the backup on the phone with a separate backup password you choose, then uploads it. SafePal says it never receives the file. Anyone who takes over your iCloud or Google account gets the encrypted file, and from then on only that backup password stands between them and your coins. SafePal’s own advice is to keep the password out of the same cloud account.

What SafePal’s Servers See

SafePal’s privacy policy says that when you use the app or the extension it may collect your wallet addresses, the addresses you pay, your transaction history and fees, and automatically your IP address, device information, operating system, internet provider, clicks in the app and crash logs. With your addresses and IP address in one place, SafePal can technically tie all your holdings on every network to your internet connection. The policy allows sharing this data with SafePal’s affiliated companies and with authorities on lawful request, and moving it to Singapore, Hong Kong, mainland China and the United States.

The store listings say something different: the App Store label reads that the app collects no data, and Google Play and the Chrome Web Store carry the same declaration. The Android app includes code from Google Firebase Analytics and Crashlytics, and neither the privacy policy nor the help centre describes a way to turn this telemetry off.

You can add an Ethereum-style network by hand with your own RPC address and choose between listed nodes for dapps, but SafePal documents no way to point Bitcoin or the built-in networks at your own node. SafePal documents no Tor option. For Bitcoin it lets you pick which coins a payment spends, a basic form of coin control, without labels or freezing.

Swaps, Buying and the IBAN Account

Swaps and cross-network bridges inside the app go to outside providers you choose on the swap screen. One of them is the Binance exchange; SafePal’s help centre says the Binance channel requires an identity check, a process known as KYC, and the MEXC channel does not. SafePal adds its own 0.2% fee to each order.

Buying and selling crypto for ordinary money run through outside companies; SafePal’s store listing names MoonPay, Simplex and Binance Connect. To sell through MoonPay, the default, you give your legal name, home address, email and an ID document. SafePal’s terms say these providers keep the identity data and that they may pay SafePal a commission for the business.

The app also offers an IBAN account and a Mastercard from Fiat24, a financial institution regulated in Switzerland in which SafePal has invested. Opening the account requires Fiat24’s identity check, and the balance shows up in your wallet as tokens on the Arbitrum network. The wallet itself needs no account and no identity check; you can fund it by receiving coins from elsewhere.

Closed Code and No Audit

The apps you install from the stores are closed source. In 2023 SafePal published a GPL-licensed repository called “SafePal App (Core Version)”, last changed that September, while the released app is now at version 4.11; the extension has no public code at all. You cannot check that a store build matches any published code, so there are no reproducible builds, and WalletScrutiny, an independent wallet-review project, rates the Android app not verifiable.

No independent security audit of the app or the extension has been published, and SafePal runs no bug bounty.

The 2026 Order Data Breach

SafePal’s incident history includes one disclosed breach. On 16 August 2026 SafePal disclosed that a flaw in the order-tracking part of its online store had let outsiders read other customers’ orders. The orders affected were placed between 2 March 2025 and 11 April 2026: names, email addresses, shipping addresses, phone numbers and purchase details of about 39,798 customers. SafePal says seed phrases, private keys, wallet passwords, card numbers and ID numbers were not involved, and that it fixed the flaw, emailed each affected customer and was engaging an outside security firm to check the fix. In an update on 18 August SafePal said people claiming to hold the data were offering it for sale; it could not verify the claims.

The breach affects people who ordered from SafePal’s online store, not people who only installed the free app. The risk for them is targeted phishing: letters, calls or fake firmware updates from someone who knows their name, address and what they bought.

Ownership and Jurisdiction

SafePal’s terms and privacy policy name SkyGenesis Holdings Limited as the company behind the service, without saying where it is registered or which country’s law applies. The App Store lists the seller as SAFEPAL LTD., and Google Play lists the developer as BitTech Group Limited, with an address in Hong Kong. SafePal names Binance, Animoca Brands and Superscrypt as its backers.

Apps and Networks

SafePal runs on Android and iPhone, and as an extension for Chrome and Edge. There is no desktop app. The extension can work on its own with its own phrase or connect to the phone app or a SafePal hardware wallet by QR code or Bluetooth.

The phone app covers Bitcoin, Ethereum, BNB Chain, Polygon, Arbitrum, Optimism, Base, Avalanche, Solana, Tron, XRP, Cardano, Litecoin, Bitcoin Cash, Dogecoin, Zcash and many smaller networks. The extension lacks Cardano and Base. There is no Monero or Lightning.

Price

The app and the extension are free. SafePal charges 0.2% of every swap and bridge order on top of the network fee and the provider’s own fee; buying, selling and the IBAN account carry the fees of the companies that run them.

Pros and Cons

A standard 12- or 24-word BIP39 phrase that other wallets can restore, with an optional passphrase
Optional seed backup to your own iCloud or Google Drive, which SafePal says is encrypted with a password you set
Built for holding coins on several networks at once, with Bitcoin, Ethereum-style networks, Solana and Tron in one phone app
Free to install and use

The privacy policy allows SafePal to collect your wallet addresses, transaction history and IP address
The app and the extension are closed source, with no published independent audit and no bug bounty
No Tor, and no way to use your own node for Bitcoin or the built-in networks
The Android app contains Google analytics and crash-reporting code with no documented off switch
The company does not say where it is registered
Outsiders read the order details of about 39,798 store customers, disclosed in August 2026
SafePal takes 0.2% of every swap and bridge order

Our Rating

SafePal suits people who want one free phone app for many networks, with swaps and a payment card built in, and who accept that SafePal’s privacy policy lets it collect their addresses and IP address. It does not suit anyone who wants to keep their holdings private from the wallet maker, check the wallet’s code, or use their own node.

Key Custody & Recovery7.0/10
SafePal says the keys stay on your phone or in your browser and that it never sees your seed phrase. The phrase is a standard 12- or 24-word BIP39 phrase that other wallets can restore, and you can add a passphrase. An optional backup puts an encrypted copy of the phrase in your own iCloud or Google Drive. There is no multisig, and losing the phrase means losing the funds.
Network & Metadata Privacy3.5/10
SafePal's privacy policy says it may collect your wallet addresses, transaction history, IP address and device details when you use the app or the extension. The Android app carries Google's analytics and crash-reporting code, with no documented way to switch it off. There is no Tor and no way to point Bitcoin or the built-in networks at your own node. Swaps, purchases and the IBAN account run through outside companies, several of which check your identity.
Security & Transparency2.5/10
The released app and extension are closed source, and the only public code is a 2023 snapshot of a core version. No independent security audit has been published and there is no bug bounty. The company does not say where it is registered. In August 2026 SafePal disclosed that order details of about 39,798 store customers had been read by outsiders.
Usability & Chain Support8.0/10
SafePal is built as a multichain wallet and covers that purpose: Bitcoin, Ethereum and the main Ethereum-style networks, Solana, Tron, XRP, Cardano and many smaller networks in one app, with swaps and dapp access inside. It runs on Android, iPhone and as a Chrome and Edge extension; there is no desktop app, and the extension lacks a few networks the phone app has.
Price & Value8.5/10
The app and the extension are free. SafePal takes 0.2% of every swap and bridge order on top of network and provider fees.

Overall5.5/10

Key Custody & Recovery 30% · Network & Metadata Privacy 25% · Security & Transparency 20% · Usability & Chain Support 15% · Price & Value 10%

See our rating methodology →