Security

Non-Custodial Architecture

Apex Wallets is a non-custodial wallet. We never hold your private keys, seed phrases, or funds. Your wallet is generated client-side and encrypted before any data is transmitted. Only you can authorize transactions.

Encryption Standards

All data in transit is protected by TLS 1.3. Sensitive data is encrypted at rest using AES-256-GCM. Session tokens are generated using cryptographically secure random sources and regenerated on each login.

Authentication

We use bcrypt (cost factor 12) for password hashing. Session management follows OWASP-recommended practices including secure, HttpOnly cookies and server-side session regeneration on privilege changes.

Spending Limits

You can set per-transaction and daily spending caps from your account settings. These limits are enforced server-side and cannot be bypassed by modified client code.

Alert Monitoring

Email and browser alerts notify you of pending transactions and account activity. Alerts are configurable per channel from your account settings page.

Best Practices

We recommend enabling all available security features: spending limits, email alerts, and browser alerts. Use a strong, unique password and never share your wallet address or seed phrase with untrusted parties.