Doge Soft
DOGE Connecting
DOGE Connecting

Docs / Get started / Security model

Keys, custody, quantum

Security model

Self-custody by default, what Doge Soft never touches, and the quantum-aware parts that do sign for you.

Doge Soft's default is self-custody: your keys, generated and held on your device, sign everything that moves your coins. This page is a plain-language account of what that means in practice, and the narrow places where a service does hold a key.

Self-custody by default

  • Keys are generated on-device and never leave it in plaintext.
  • DRC-20 sends are fully client-signed: the commit, reveal, and the final move transaction are all signed locally before anything is broadcast. A server-side pipeline worker exists purely to broadcast a signed move reliably (including after an app restart) — it never signs on your behalf.
  • The browser extension holds no key at all. It relays signing requests to your paired phone over a stateless relay; your phone wallet is the only thing that ever produces a signature. See extension pairing.
  • Biometric or password unlock, auto-lock on inactivity, and a screenshot barrier on sensitive screens guard the device itself.
⚠️

Nothing on this site, in the wallet, or in these docs will ever ask for a seed phrase, private key or password to "verify," "sync," or "unlock rewards." If you see that request anywhere claiming to be Doge Soft, it isn't us.

Where a service does hold a key

Two places in the ecosystem involve a service-side signer, and both are scoped narrowly to their own contract rather than to user wallets in general:

  • Bridge attesters. Minting wrapped DRC-20 on DogeOS and releasing back to L1 requires M-of-N registered attesters on the DogeOS bridge contract — see Attesters & co-signers and Transparency.
  • Bonding-curve launch settlement. Newly-launched coins settle their bonding-curve purchases through the AMM backend, which holds the operational key for that specific contract's reserve — not for any user's wallet.

Quantum-aware signing

Alongside standard ECDSA signing, Doge Soft has been building out post-quantum-aware attestation using Falcon signatures — inscriptions and registry entries that can carry a PQC signature layer in addition to the classical one. It's an additive, forward-looking layer on top of the standard Dogecoin signing you already rely on, not a replacement for it today.

Verify, don't trust

Every balance the wallet shows you, and every price Pulse shows you, is reconstructed from public Dogecoin L1 data through the Explorer API. You don't have to take an app's word for your balance — look the address up yourself.