Security architecture

The final approvalnever leaves your hand.

Keel can prepare a route and explain a transaction. It cannot export your keys, sign remotely, or move funds without your device.

Key creation
On your device
Transaction simulation
Read-only
Final signature
Face ID or passcode
Remote signing
Not possible

Transaction review

Simulation complete

Clear

You send

0.42 ETH

$1,326.18

You receive

1,312.04 USDC

on Base

App
Uniswap V3
Route
Ethereum → Base
New approvals
None
Max network fee
$2.84

No unexpected balance or permission changes

Approve with Face ID

The security boundary

What Keel can—and cannot—do.

0

keys held by Keel infrastructure

Public wallet activity can be read to prepare context. Private authorization stays on the device that created it.

Hardware-backed keys

Key material is generated on your device and protected by the phone's secure hardware.

Readable transaction checks

Keel simulates supported transactions and shows approvals, recipients, and asset changes.

No invisible permissions

Unlimited approvals, suspicious destinations, and unfamiliar contracts receive clear warnings.

Recovery on your terms

Choose encrypted cloud recovery, trusted contacts, or a completely offline backup.

Recovery plan

Recovery without handing Keel a master key.

Combine methods that fit how you hold funds. Each option is encrypted independently and can be reviewed before it becomes part of your plan.

Your recovery plan

Two methods are ready

2 of 3

Encrypted device backup

Ready · Updated today

Ready

Trusted contact

Maya Chen · Verified

Ready

Offline recovery kit

Not added

Not added

A new device requires your recovery plan and device security.

Ready when you are

Start with a wallet you can understand.

Set up Keel on iPhone, test your recovery plan, and review every transaction before moving meaningful funds.

iPhone beta · Android access follows