How Arca keeps your wallet safe

Your wallet security depends on a few things working together: how the wallet is created, how you get back in if you lose access, and what checks run before each transaction. Arca handles each of these a little differently from a typical wallet, and the result is simpler to use and harder to lose.

This page explains the three pieces. You do not need to understand them in detail to use Arca safely. Knowing the shape of the system is enough.

No 12-word recovery phrase

Most wallet apps ask you to write down 12 secret words when you sign up. Those words are the only way back into the wallet if you lose your phone or your app. Lose the 12 words, lose the wallet.

Arca does not work that way. When you sign up, Arca creates a signer tied to your login (your email, Google, or Apple account) and uses it to secure your Smart Account. There are no 12 words to write down. There is no piece of paper to hide.

What this means in practice:

Nothing to lose. You will not forget a phrase that was never yours to remember.
No backup ritual. You do not have to test whether you can recover before moving real money in.
Your login is the key to getting back in. Treat it the same way you would treat your primary bank login.

Built-in recovery

If something happens to your phone, you do not need a piece of paper to get back in. You sign in again with the same email, Google, or Apple account on any device running Arca, and your wallet opens with your balance and history intact.

This is what the app calls Built-in Recovery. It shows up in the Keys & Recovery screen in Settings. The short version: something goes wrong, you recover through your login.

You do not need a seed phrase, but recovery depends on keeping access to the login method you chose. Keep your email, Google, or Apple account secure and turn on two-factor protection there when you can.

Smart Account Protection

Manual wallet sends in Arca pass through an address screening check before review. If a recipient appears sanctioned or unsafe, Arca can block that send.

Standard wallets approve transactions blindly. You sign, it executes. Arca adds a step: it checks the transaction first, so you do not accidentally sign away tokens to a bad actor.

Connected-app requests use approval screens and warnings. Some requests can be decoded in detail, while contract calls or app-specific actions may show contract, network, simulation, or warning information instead. Only claim a request is blocked when Arca shows a block.

What you still need to do

Arca handles the hard parts. Your remaining responsibilities are simpler:

Keep your login secure. Turn on two-factor authentication on your Google, Apple, or email account. That is the primary lock on your wallet.
Lock your phone. A passcode or biometric on the phone itself is a second layer.
Review before you confirm. Every Send screen shows you the destination and amount. Take the second it takes to read them.
Think before connecting apps. Only connect to apps you trust, and disconnect them when you are done. See Connect to other apps.

What about advanced users?

If you want the option to export your signer private key as an advanced backup, you can. The Export Wallet Key flow is in Settings under Keys & Recovery. It is optional and is not required for everyday use. See Export your wallet key for what it is and when to use it.

Most people never need to export. The recovery path through your login works for the large majority of situations.

The short version

Sign in with email, Google, or Apple.
Keep that login safe.
Lock your phone.
Read the screen before you confirm a send.

Do those four things and your wallet is in good shape.