Skip to content

The vault & your keys

jeetproof is non-custodial. This page explains what that means in practice.

To operate wallets on your behalf (buying, selling, distributing), the terminal needs your wallet private keys available at execution time. Storing those keys in plaintext would be reckless. The vault solves this by encrypting them with a key only you control.

  1. On first sign-in, jeetproof generates a BIP-39 seed phrase (12 words) for your account.
  2. That seed derives your personal vault key (via HKDF).
  3. Every wallet private key you add is encrypted with AES-256-GCM under your vault key before it’s stored.
  4. The vault key itself is protected by a server master key, so neither half alone is enough.

The result: your keys are useless to anyone who doesn’t have your seed phrase - including us.

  • You are the backup. Write your seed phrase down and keep it offline. We cannot reset or recover it.
  • Losing the seed = losing those wallets. There is no support path around this by design.
  • Keys never leave in readable form. They are decrypted only in memory, at the moment an operation runs.

Login sessions use JWTs, expire after 7 days, and are revocable. Signing out or revoking a session does not touch your vault - your encrypted keys stay put.