[Wallets](https://revain.org/wallets/) › Trust Wallet

# Trust Wallet: keys, security, fees and reviews

Software wallet

## Key facts

- **Wallet type**: Software wallet
- **Who holds the keys**: the user (self-custody)
- **Developer**: DApps Platform Software Services Ltd.
- **Platforms**: iOS, Android, browser extension
- **Official site**: [trustwallet.com](https://trustwallet.com/)

Checked on 2026-10-27 against the official site, docs and app-store pages.

## What is Trust Wallet

Trust Wallet is a self-custodial wallet for mobile and as a browser extension, operating since 2017. It supports assets on 100+ blockchains and connects to dApps, swaps, staking and partner services for buying crypto. Keys are generated and stored on the user's device.

## Who holds the keys

| Parameter | Details |
|---|---|
| Key control | Self-custodial: keys are generated and stored on the user's device, never on Trust Wallet servers. |
| Seed phrase | Secret recovery phrase created on the device; the wallet can be restored in any compatible app. |
| Recovery | Optional encrypted cloud backup to the user's own iCloud or Google Drive, protected by a password Trust Wallet cannot reset. |
| Account model | No Trust Wallet account and no server-stored password. |

## Features and supported networks

| Parameter | Details |
|---|---|
| Platforms | Mobile app and browser extension. |
| Supported networks | 100+ blockchains. |
| dApp browser | Built-in browser for third-party dApps and decentralised exchanges. |
| Swaps | Swaps, staking, buying and selling are provided through partners. |
| Security scanner | Simulates transactions and warns about known scam contracts and risky approvals before signing. |

## Security and audits

- Terms state the wallet is under a GPL open-source licence; its core library, Wallet Core, is public on GitHub under Apache 2.0.
- Published audits include CertiK and Cure53 (browser extension, 2023), Halborn and CertiK (SWIFT wallet, 2023), Quantstamp and Halborn (smart account, 2025).
- On 24 December 2025 a malicious extension version 2.68 was published to the Chrome Web Store using a leaked API key; 2,520 addresses were drained (about $8.5 million) and Trust Wallet chose to reimburse affected users.

## Fees

| Parameter | Details |
|---|---|
| Wallet | Fees are mainly set by third-party partners and shown in the app; network fees apply. Trust Wallet may receive a revenue share. |

## History

| Date | Event |
|---|---|
| 2017 | Trust Wallet began operating. |
| April 2023 | Cure53 audited the browser extension. |
| 24 December 2025 | A malicious extension version 2.68 was published using leaked credentials linked to the Sha1-Hulud supply-chain attack; affected users were offered reimbursement. |
| December 2025 | Clean version 2.67 was re-released as 2.69. |

## Risks and caveats

- Anyone with the recovery phrase controls the funds; a lost phrase with no backup means lost funds.
- A December 2025 supply-chain attack on the browser extension drained user wallets; the vendor reimbursed affected users.
- dApps, DEXes, staking and buy/sell services are third-party and outside Trust Wallet's control.

## About the developer

- **Developer**: Trust Wallet and its affiliates.
- **Founded**: 2017

## Official links

- Website: [trustwallet.com/about-us](https://trustwallet.com/about-us)
- Security: [trustwallet.com/blog/security/complete-overview-of-trust-wallet-security](https://trustwallet.com/blog/security/complete-overview-of-trust-wallet-security)
- Source code: [github.com/trustwallet](https://github.com/trustwallet)
- Blog: [trustwallet.com/blog](https://trustwallet.com/blog)

## Questions and answers

**Is Trust Wallet self-custodial?**

Yes. Keys are generated and stored on the user's device; Trust Wallet never holds them and there is no account.

**Is Trust Wallet open source?**

Its terms state a GPL open-source licence, and its core library Wallet Core is public on GitHub under Apache 2.0.

**Which networks does Trust Wallet support?**

Assets on more than 100 blockchains.

**Has Trust Wallet been hacked?**

In December 2025 a malicious browser extension version 2.68 drained 2,520 addresses (about $8.5 million); Trust Wallet said it would reimburse affected users.

**Has Trust Wallet been audited?**

Yes. It publishes audits by CertiK, Cure53, Halborn, Quantstamp and Kudelski for different components from 2023 to 2025.

## Sources

- [trustwallet.com](https://trustwallet.com/)
- [apps.apple.com](https://apps.apple.com/us/app/trust-crypto-bitcoin-wallet/id1288339409)
- [Trust Wallet — Terms of Service](https://trustwallet.com/terms-of-service)
- [Trust Wallet — Is Trust Wallet safe?](https://trustwallet.com/blog/security/is-trust-wallet-safe)
- [Trust Wallet — Complete overview of Trust Wallet security](https://trustwallet.com/blog/security/complete-overview-of-trust-wallet-security)
- [Trust Wallet — Browser Extension v2.68 Incident: An Update to Our Community](https://trustwallet.com/blog/company/trust-wallet-browser-extension-v268-incident-community-update)
- [Trust Wallet — About us](https://trustwallet.com/about-us)
- [GitHub — trustwallet/wallet-core](https://github.com/trustwallet/wallet-core)

## More in this section

- [Atomic Wallet](https://revain.org/wallets/atomic-swap-wallet/)
- [Blockchain.com Wallet](https://revain.org/wallets/blockchain-wallet/)
- [Coinomi](https://revain.org/wallets/coinomi/)
- [Exodus](https://revain.org/wallets/exodus/)
- [Enjin Wallet](https://revain.org/wallets/enjin/)
- [Coin Wallet](https://revain.org/wallets/coinspace/)
- [All Wallets →](https://revain.org/wallets/)

## How voting works

Votes are anonymous and carry no text. Each device has one vote per item; press the same button again to remove it. Cloudflare Turnstile checks that a person is voting. We keep a random device ID in a cookie and a salted hash of the IP address to limit abuse — no names, no accounts. Votes are visitors’ opinions, not investment advice.

Page updated: 2026-10-29

---
Source: https://revain.org/wallets/trust-wallet/