Trust Wallet

Trust Wallet is a free phone wallet for Android and iPhone, with a browser extension for Chrome and Brave. It holds Bitcoin, Ethereum, Solana, BNB Chain, Tron and many other networks in one app, and it has built-in buying, swapping and staking through outside companies. The company was founded in 2017, and Binance bought it in 2018.

Trust Wallet says the wallet is self-custody: your keys are stored encrypted on your device, and the company cannot move or freeze your coins. Only the key library behind the app and some auxiliary components are open source, so this claim cannot be checked against the app’s own code. Privacy is not the app’s focus: by default Trust Wallet’s servers learn your addresses, and every transaction on Bitcoin, Ethereum and the other public blockchains in the app is visible to anyone.

Who Holds the Keys

A new wallet gets a 12-word seed phrase in the BIP39 standard, and the app also imports 24-word phrases from other wallets. One app can hold up to 15 wallets, each with its own phrase. Trust Wallet does not ask you to write the phrase down while you set up a wallet; it waits in the backup menu behind your PIN, and the app shows it on the screen of your phone or computer. You can also save an encrypted copy of the phrase to your own cloud account, which Trust Wallet says only you can open.

Trust Wallet’s guides describe no passphrase option and no multisig wallets. Private keys for single networks can be exported only after you turn on a hidden developer mode, and only in the phone app.

Losing the Seed Phrase

There is no account and no reset. If you lose your phone and have no copy of the phrase, nobody, including Trust Wallet, can recover the coins. Because the phrase is standard, another wallet can restore most of the funds if Trust Wallet stops supporting a network. When the app dropped 24 networks in September 2026, Trust Wallet’s own guide warned that on four of them, including Wanchain and IoTeX, it had created your address differently from your Ethereum address, so adding the network back by hand in Trust Wallet shows a zero balance. Trust Wallet says the funds have not moved and that it is working on a way to restore access. Other wallets may not find those addresses either.

What Trust Wallet’s Servers See

A wallet does not download the blockchain itself; it asks a server. Trust Wallet’s privacy notice says the app processes your public addresses, your transaction history and device details, and that the IP address is used briefly to route traffic and apply country rules but is not stored. Its servers can therefore link the addresses of one wallet, even if Trust Wallet says it does not keep your IP address.

You cannot point the built-in networks at your own full node. The Android app lets you add a custom Ethereum-style network with your own server address, and Trust Wallet says the iPhone app will follow; Bitcoin has no such option. Trust Wallet’s guides describe no built-in Tor and no coin control for Bitcoin, so the app offers no way to keep coins from different sources apart.

The App Store listing says the iPhone app collects only crash data. The Google Play listing says the Android app collects app interactions and crash logs for analytics, and device identifiers for app functionality; neither store nor Trust Wallet’s help pages describe a way to turn this off. Questions you ask the in-app AI assistant go to outside AI providers.

Buying, Swapping and Staking

Trust Wallet does not run an exchange. Buying with a card or bank transfer goes through outside companies such as MoonPay, Banxa, Ramp, Transak and Mercuryo, which follow their own rules and usually check your identity, a process known as KYC. The wallet itself needs no sign-up, and you can fund it by receiving coins from elsewhere instead.

Swaps run through outside providers such as ZeroEx, Rango, deBridge and Jupiter, which receive your coins and send the new ones to your address; cross-chain swaps also pass through outside bridges. Staking goes through outside staking providers. Before you sign, the app’s security scanner flags known phishing sites and suspicious contracts, according to Trust Wallet.

Open Source and Audits

Wallet Core, the library that creates keys and signs transactions for the app, is open source under the Apache 2.0 licence on GitHub. The phone app, the browser extension and Trust Wallet’s servers are not: the company’s public phone-app repositories have not been updated since 2019 and are archived. Without the app’s code, there are no reproducible builds, and you cannot check that the app from a store does what the library does.

Trust Wallet publishes several security audits; the reports on the browser extension say Trust Wallet’s company ordered them. In April 2023 Cure53 audited the browser extension’s code and found one high-severity and four low-severity issues, all fixed. An earlier test of the extension by CertiK left wallet creation and key derivation out of scope. The other reports cover the retired Swift smart-contract wallet, swap contracts, one outside library and a 2024 penetration test centred on the trustwallet.com website. No audit of the phone app has been published.

Security reports go through Binance’s bug bounty programme, which lists Trust Wallet as part of the Binance ecosystem; rewards for the most severe issues may reach $100,000, paid in BNB.

Incidents and Vulnerabilities

Trust Wallet’s incident history includes two flaws in key generation and one compromised release.

Researchers showed in January 2024 that wallets created by the iPhone app in 2018 used a weak random number source seeded with the time, so their keys could be guessed. Wallets from the iPhone app were among those drained on 12 July 2023, in thefts that researchers put at more than $1 million in total across several kinds of weak wallets. According to the researchers, the code was fixed in August 2018; Trust Wallet’s team told them that most affected addresses did not belong to its users and that it had warned affected addresses in 2018, which the researchers dispute.

The browser extension, released on 14 November 2022, created seed phrases with too little randomness, so anyone who knew an address could compute its private key. Researchers reported it through the bug bounty on 17 November 2022, and Trust Wallet committed the fix publicly on GitHub on 21 November. Around $30 million sat in vulnerable wallets at one point. Trust Wallet disclosed the flaw in April 2023, after asking users to move their funds, and promised to reimburse stolen funds.

On 24 December 2025 an attacker published a malicious version 2.68 of the browser extension to the Chrome Web Store, using a leaked publishing key. Trust Wallet says the key was most likely exposed a month earlier in Sha1-Hulud, a supply-chain attack on npm software packages; its investigation is still open. The fake version sent out wallet data of users who opened it between 24 and 26 December. Trust Wallet counted 2,520 drained addresses. It linked about $8.5 million to 17 addresses controlled by the attacker, and says these addresses also drained wallets not connected to Trust Wallet. The phone app was not affected. Trust Wallet released a clean version 2.69 and decided to reimburse affected users; in July 2026 claims were still being reviewed one by one.

Ownership and Jurisdiction

Viktor Radchenko founded Trust Wallet in 2017, and Binance bought it in July 2018 as its first acquisition, saying the wallet would keep its autonomy. That purchase is the last documented change of ownership; Trust Wallet does not publish who owns it today. Its privacy notice names Dapps Platform Bahrain W.L.L. as the company that handles your data, and its terms of service fall under Hong Kong law, with disputes settled by arbitration in Hong Kong. The terms cap the company’s liability to you at $100. The privacy notice says Trust Wallet gives data to authorities when the law requires it.

Apps and Networks

Trust Wallet runs on Android and iPhone, and as a browser extension for Chrome and Brave on Windows, Mac and Linux. The official site is trustwallet.com, and Trust Wallet tells users to download the app only from the official app stores or trustwallet.com/download. The extension can connect to one brand of hardware wallet over USB for Bitcoin, Ethereum and Solana.

The app covers Bitcoin, Ethereum, BNB Chain, Solana, Tron, XRP, Cardano, Litecoin, Bitcoin Cash, Dogecoin, Zcash, Polygon, Arbitrum, Optimism, Base, Avalanche and many smaller networks. For Bitcoin you can change the network fee before sending; Trust Wallet’s guides describe no Bitcoin privacy tools. Trust Wallet’s pages on Zcash do not mention shielded addresses. A passkey-based smart-contract wallet called Swift is being retired, and new users can no longer create one.

Price

Trust Wallet is free. Sending costs only the network fee, and buy providers add their own fees, which Trust Wallet says are shown before you confirm a purchase. On swaps, Trust Wallet’s pages contradict each other: the swap page says the company adds no fee, while an August 2026 offer waives “the Trust Wallet swap fee” on some stablecoin pairs and says the standard fee applies to other swaps. The rate is not published, so compare the amount you will receive in the quote.

Pros and Cons

Our Rating

Trust Wallet suits people who want one free phone app for coins on many networks, with buying and swapping built in. It does not suit anyone who wants to hide which addresses are theirs from the wallet company, run their own Bitcoin node, or rely on code they can check.