What the InfraIO Wallet is
InfraIO Wallet is a smart-account wallet built on the ERC-4337 standard. A smart account is a wallet that lives on the blockchain as a program, so it can be controlled by a passkey instead of a single secret you have to copy and guard. (ERC-4337)
A passkey is a cryptographic key that stays on your device, in your passkey manager or the device's secure chip. You approve each action with Face ID, a fingerprint, face unlock or your device passcode. The key itself is never shown to you, to the app or to us. (FIDO Alliance)
Who holds what
The short version: you hold the keys, the blockchain holds the funds, and InfraIO Pay holds neither.
| You | InfraIO Pay | |
|---|---|---|
| Passkey (the key that approves transactions) | Stays on your devices | Never has it |
| Recovery phrase | Shown to you once, and you keep it | Never sees it and never stores it |
| Your funds | Controlled by your wallet | Not held by us; they live on the blockchain |
| Wallet address and activity | Public on the blockchain | We keep your address and activity history to show them in the app |
Same address on every EVM network
Your wallet has one address, and it is the same on every EVM network the wallet supports. Your funds sit at that address on the blockchain, not in an account at InfraIO Pay.
Send only on a network the wallet supports. Funds sent on a network it does not support can be lost.
What our service adds
InfraIO Pay runs services around the wallet. They make it nicer to use. None of them holds a key or can approve a transfer.
- Sponsored network setup on some networks: we cover the one-time network fee to set up your wallet there.
- Faster activity history.
- NFT galleries.
- The dApp list.
- Notifications when funds arrive.
What if those services are unavailable?
The wallet does not depend on them. If our servers cannot be reached, the app switches to a limited mode by itself: it reads balances and sends directly through public blockchain infrastructure, then switches back when we are reachable again. Your wallet and your control over it stay the same.
A few extras pause while we are away: NFT galleries, dApp list updates, notifications and sponsored setup, in which case the network fee is paid from your balance. Public blockchain infrastructure can have outages of its own, but it is not run by us.
The wallet is a standard smart account on the blockchain, not a record in our database, so it exists whether or not our servers do. Compatible smart-account tooling can operate it with your recovery phrase; what a particular tool supports depends on that tool.
How recovery works
There are three ways back into your wallet. Set up more than one.
- Passkey sync. Passkey managers such as iCloud Keychain and Google Password Manager sync your passkey across your devices in the same ecosystem, so a new phone signed in to the same account has it. Between iPhone and Android, add a new passkey instead (see below). (Apple)
- Recovery phrase. You can set up 12 words created on your device and shown to you once. Write them down and keep them offline. If you lose your passkeys, the phrase lets you add a new passkey to your wallet. Your recovery phrase works on its own — it doesn't depend on your passkey or on any of our services. You add it to your wallet on each network from the Recovery phrase screen in the app, and a network fee applies.
- New device or extra passkey. Add a passkey on another device and approve it from one you already use. A spare passkey is the easiest backup.
What we cannot do
Holding your own keys means we really are out of the loop. That has consequences, and we would rather you read them here than learn them later.
Keep reading: What is a multisig wallet?, How to use InfraIO Wallet, What is a crypto wallet?, InfraIO Wallet
- Access, freeze or move your funds. Only your passkey, or your recovery phrase, can approve a transfer.
- See your recovery phrase. It is created on your device and we never store it.
- Recover your wallet if you lose both your passkey and your recovery phrase. We hold no copy of either, so nobody can, including us. Funds in a wallet that nobody can sign for stay where they are, out of reach.
