Skip to content
RocketRPC

Security

We design RocketRPC so that the keys controlling your money never pass through us.

Premine wallets are made on your device

If you choose to create a premine wallet in the builder, the keys are generated in your browser with its built-in secure random number generator.

The private key is placed in a backup file you download.

It is never sent to our servers or saved in your browser storage. Only the address is kept in your order.

Logging in

There are no passwords to steal. You log in with a one-time link we email you. A login link works once and expires in 15 minutes; the link in your order email lasts 24 hours.

We store only a fingerprint (a hash) of each link and login session, never the link itself.

Validators: you keep your stake

When you run a validator with us, we run the server. You stake from your own wallet, and your funds never pass through us.

Payments

When payments open, each order will get its own deposit address from our own wallets, and our servers will confirm every payment on the blockchain rather than trusting your browser. Payments are not live yet; the checkout shows your order without taking payment.

Report a vulnerability

Email [email protected] with "Security" in the subject, the details and the steps to reproduce. Please give us reasonable time to fix the issue before sharing it publicly.