One security boundary
The same device receives transaction requests and holds the authority to sign them.
Self-Custody on Apple Watch
Keep your keys off your phone.
Cryptograph keeps signing authority on Apple Watch. Your iPhone displays the portfolio, prepares unsigned requests, and relays data. It cannot sign.
The Separation
A separate signing authority.
Cryptograph gives the phone and watch distinct responsibilities.
Prepare and relay
The iPhone displays the portfolio, composes unsigned requests, handles networking, and relays data. It cannot sign.
Review and sign
Apple Watch holds the signing material, decodes the request, shows what will be signed, and requires your approval.
Cryptograph's Design
The watch holds signing authority.
Apple Watch holds the signing material and shows the request before you approve it. The iPhone remains the display and network layer.
- Creates and holds the wallet
- Shows transaction details before approval
- Approves and signs transactions
- Encrypts recovery data before export
- Shows the portfolio and prepares requests
- Handles WalletConnect and network traffic
- Relays requests and completed signatures
- Cannot sign
Secure Enclave
The encrypted mnemonic is stored in the watchOS Keychain and protected at rest by a non-exportable Secure Enclave key. Approved blockchain signing happens in Cryptograph on the watch.
Tradeoffs
What you trust.
Cryptograph relies on the hardware in your Apple Watch, watchOS, App Store distribution, and Cryptograph itself when you sign. Dedicated wallets make different choices.
Already with you
No dedicated crypto object in a drawer, pocket, or bag. Approval happens on your Apple Watch.
Apple platform
Cryptograph requires a compatible Apple Watch and iPhone. Signing runs in Cryptograph on your Apple Watch, not inside a purpose-built secure element.
Approval on the wrist
Your Apple Watch displays consequential transaction details before approval becomes available. Your iPhone cannot approve on its own.
Recovery, by design
Setup includes an encrypted Recovery Sheet. Photo Backup can provide a second encrypted copy. Cryptograph has no recovery backdoor.
If your Apple Watch is lost or replaced, restore on another compatible Apple Watch. If your Apple Watch and every recovery copy are lost, the funds cannot be recovered. Read the recovery guide.
Cryptograph Watch Wallet