Zengo: keys, security, fees and reviews
In short
- Key control
- Self-custodial MPC: one secret share on the phone, one on Zengo's server; both are needed to sign, and Zengo cannot move funds alone.
- Fees
- Wallet: No Zengo fee for sending, receiving or storing crypto; blockchain network fees apply.
- Risks and caveats
- Recovery needs the email and the Recovery File; if the Recovery File is lost, Zengo cannot restore it.
- Checked
- 31 October 2026
Visitor ratings: do you like Zengo?
Key facts
- Official site
- zengo.com
Key facts checked on 31 October 2026 against official sources.
What is Zengo
Zengo is a self-custodial mobile crypto wallet for iOS and Android that replaces the seed phrase with MPC (multi-party computation): the signing key is split into a share on the phone and a share on Zengo's servers. It is made by Zengo Ltd. and has operated since 2018.
Who holds the keys
| Parameter | Details |
|---|---|
| Key control | Self-custodial MPC: one secret share on the phone, one on Zengo's server; both are needed to sign, and Zengo cannot move funds alone. |
| Seed phrase | No seed phrase or private key to back up; the key is never held in one place. |
| Recovery | Recovery Kit: email plus a Recovery File in the user's cloud (iCloud, Google Drive, Dropbox); 3D FaceLock is optional since 23 May 2024. |
| Recovery file | The Recovery File is stored only with the user; Zengo has no access to it and cannot help if it is lost. |
| Guaranteed access | Independent escrow and trustee companies can trigger wallet recovery through a public GitHub repository if Zengo stops operating. |
Features and supported networks
| Parameter | Details |
|---|---|
| Platforms | Mobile app for iPhone (iOS 12.5.5 and later) and Android (6.0 and later). |
| Supported networks | 1,000+ assets on dozens of chains, including Bitcoin, Ethereum, Solana and TRON. |
| Buy / sell | Buying, selling and trading through integrated third-party providers. |
| dApp browser | Connects to DeFi apps and NFT marketplaces through WalletConnect. |
| NFTs | Ethereum and Polygon NFTs. |
| Zengo Pro | Paid tier with Legacy Transfer (inheritance), withdrawal protection, Web3 Firewall, multiple wallets and priority support; the basic wallet stays free. |
| Prediction markets | In-app access to Polymarket prediction markets. |
| Sign-in | Accounts can be created or recovered with Google, Apple, email or an eToro account. |
Security and audits
- Zengo's MPC cryptography is open source on GitHub (ZenGo-X); the multi-party ECDSA library is released under GPL-3.0. The wallet app itself is not published as open source.
- Zengo publishes external app audits on its security page: Kudelski (March and October 2019), AppSec (June 2019), Scorpiones (February 2021, October 2022) and CertiK (May 2023).
- The Scorpiones report of 3 October 2022 covers a mobile penetration test of the iOS and Android apps run from 6 to 14 June 2022.
- Zengo states that no Zengo wallet has been hacked since its founding in 2018.
Security incidents
No security incident is recorded in the sources checked on 31 October 2026 (the company’s own channels and incident databases): api.llama.fi/hacks, hacked.slowmist.io/search, rekt.news/leaderboard, zengo.com/blog
Fees
| Parameter | Details |
|---|---|
| Wallet | No Zengo fee for sending, receiving or storing crypto; blockchain network fees apply. |
| Buy / sell | Third-party processing fees, spread, gateway and currency-conversion fees, shown before confirmation. |
| Subscription | Zengo Pro is a paid subscription with several plans; Zengo Essentials remains free. |
History
| Date | Event |
|---|---|
| 2018 | Zengo founded and began protecting customer funds. |
| March 2019 | First published external audit, by Kudelski. |
| 3 October 2022 | Scorpiones mobile application security assessment report (version 2.0). |
| May 2023 | CertiK audit. |
| 23 May 2024 | 3D FaceLock became optional for recovery; the Recovery Kit went from three to two mandatory factors. |
| 2026 | Zengo announced that it is joining forces with eToro; Sign in with eToro was added to the app. |
Risks and caveats
- Recovery needs the email and the Recovery File; if the Recovery File is lost, Zengo cannot restore it.
- Crypto transactions are not reversible; the recipient address must be checked before sending.
- Zengo is not available in China and a few other countries because of local regulations.
- Buying and selling go through third-party providers that charge their own fees and set their own limits.
About the developer
- Legal entity
- Zengo Ltd.
- Headquarters
- Israel: website terms are governed by Israeli law, with the Tel Aviv District Court as venue.
- Founded
- 2018
- Partner
- eToro: Zengo announced in 2026 that it is joining forces with eToro.
Official links
- Website: zengo.com
- Support: help.zengo.com/en
- Source code: github.com/ZenGo-X
- Security: zengo.com/security
Questions and answers
Is Zengo self-custodial?
Yes. Zengo uses MPC: one key share stays on the phone and one on Zengo's server, and Zengo cannot move funds on its own.
Does Zengo have a seed phrase?
No. Recovery uses the account email and a Recovery File in the user's cloud storage; 3D FaceLock is optional since 23 May 2024.
Is Zengo open source?
Its MPC cryptography is open source on GitHub (ZenGo-X, GPL-3.0); the app itself is not published as open source.
Has Zengo been audited?
Zengo publishes external audits by Kudelski, AppSec, Scorpiones and CertiK from 2019 to 2023 on its security page.
Does Zengo charge fees?
Sending, receiving and storing are free apart from network fees; purchases carry third-party fees, and Zengo Pro is a paid subscription.
Sources
- Zengo — Home (archived 14 October 2026)
- Zengo — Security (archived 15 May 2026)
- Zengo — Team (archived 16 May 2026)
- Zengo — Terms of use (archived 15 May 2026)
- Zengo Help — How Zengo security model works
- Zengo Help — What is Zengo's Recovery Kit
- Zengo Help — What happens if Zengo goes out of business?
- Zengo Help — Fees and transaction limits
- Zengo Help — Is Zengo open-source?
- Zengo Help — Sign in with eToro
- GitHub — ZenGo-X/multi-party-ecdsa
- Scorpiones — Zengo mobile application security assessment (October 2022)
More in this section
How voting works
Votes are anonymous and carry no text. Each device has one vote per item; press the same button again to remove it. Cloudflare Turnstile checks that a person is voting. We keep a random device ID in a cookie and a salted hash of the IP address to limit abuse — no names, no accounts. Votes are visitors’ opinions, not investment advice.
Page updated: