Keys and custody
Security model
Self-custody by default, what Doge Soft never touches, and the few services that sign their own transactions.
Doge Soft's default is self-custody: your keys, generated and held on your device, sign everything that moves your coins. This page is a plain-language account of what that means in practice, and the narrow places where a service does hold a key.
Self-custody by default
- Keys are generated on-device and never leave it in plaintext.
- Every transaction that spends your coins is signed on your device after you approve it. For DRC-20 sends, Doge Soft's inscriber prepares the transfer inscription, and your wallet signs the move that delivers it to the recipient. Your key never leaves the device.
- The browser extension keeps its own wallet encrypted on your computer and signs locally after you approve, behind your password. You can also pair it with your phone so the phone wallet approves and signs instead. See extension pairing.
- Biometric or password unlock, auto-lock on inactivity, and a screenshot barrier on sensitive screens guard the device itself.
Nothing on this site, in the wallet, or in these docs will ever ask for a seed phrase, private key or password to "verify," "sync," or "unlock rewards." If you see that request anywhere claiming to be Doge Soft, it isn't us.
Where a service does hold a key
A few Doge Soft services sign their own transactions. None of them holds a key to any user's wallet:
- Bridge attesters. Minting wrapped DRC-20 on DogeOS and releasing back to L1 requires M-of-N registered attesters on the DogeOS bridge contract — see Attesters & co-signers and Transparency.
- Inscriber. When Doge Soft inscribes for you (DRC-20 transfer preparation, Origin Services, platform mints), the inscriber signs the inscription transactions it creates and delivers the result to your address.
- Bonding-curve launch settlement. Newly-launched coins settle their bonding-curve purchases through the AMM backend, which holds the operational key for that specific contract's reserve — not for any user's wallet.
Falcon stamp (post-quantum attestation) Live on Android
Soft Wallet on Android can attach a Falcon stamp to a Dogecoin address: a post-quantum attestation using Falcon-512, one of the signature schemes selected for NIST post-quantum standardization, implemented through the open-source liboqs library.
The stamp is written to Dogecoin mainnet in two steps. A commit transaction records a fingerprint of the Falcon public key and signature. A reveal transaction then publishes the full Falcon public key and signature, and the Doge Soft indexer verifies it. It works on Dogecoin as it is today, with no consensus change.
The stamp is an additional proof that sits alongside standard signing. Your normal Dogecoin keys still authorize every spend, and the Dogecoin network itself does not check the Falcon part.
Verify, don't trust
Every balance the wallet shows you, and every price Pulse shows you, is reconstructed from public Dogecoin L1 data through the Explorer API. You don't have to take an app's word for your balance — look the address up yourself.