FAQs

Skip to: Supported chains · Recovery & import · General FAQ

Supported chains

mallow wallet is multi-chain. A wallet created or imported from a recovery phrase manages every chain from that one phrase.

All chains are on by default. You can switch Ethereum and Tezos off in Settings → Active Networks; Solana cannot be turned off.

What's supported on each chain today:

• Solana: everything the app does. You can send, receive, swap, and burn tokens, stake SOL, and view, transfer, and burn artworks. You can also buy, bid, make offers, list, and mint on mallow's marketplace. Swaps, liquid staking, and the buying and selling side of the marketplace are Android only. See Why can't I buy, list, mint, or swap on iOS?
• Ethereum: send and receive ETH and ERC-20 tokens, and view and transfer ERC-721 and ERC-1155 artworks. Mainnet only, with no swaps and no marketplace actions. Every Ethereum transfer is simulated before you can sign it, and blocked if the simulation shows anything moving other than what you asked for.
• Tezos: send and receive XTZ and FA1.2/FA2 tokens, and view Tezos artworks. Tezos artworks can't be transferred from the app yet.

Supported assets has the full table by token standard. The derivation path used for each chain is listed under Derivation paths.

Cross-chain bridging is not built into the app. If you bridge, you do so on a third-party site at your own risk.

Recovery & import

I have a recovery phrase (seed phrase) from another wallet — how do I import it?

Tap your account name, then Add wallet → Import recovery phrase, and enter your 12 or 24 words in order. The app then lets you pick which of the phrase's accounts to add. Adding wallets walks through it, including what to do when the address you expect is missing.

How do I recover my wallet on a new phone?

1. Install the mallow wallet on the new device. It is not on the App Store or Google Play yet — until it is, the only official builds are TestFlight on iOS and Google Play closed testing on Android, both by invitation from mallow.
2. Tap I already have a wallet, then Use a recovery phrase.
3. Enter your recovery phrase and pick the accounts to restore. The app rederives your keys and reconnects to the chains.
4. Set up biometrics and a new PIN.

A wallet made with Apple or Google sign-in has no phrase. Tap I already have a wallet and sign in with the same account instead.

Your transaction history and balances will repopulate from public chain data — there is nothing to "sync" from mallow servers because we do not hold an account for you.

What happens if my phone is lost or stolen?

If you have your recovery phrase backed up, your funds are not at risk from the loss of the device alone — the wallet's secrets are encrypted at rest by the OS key store, and the app itself is gated behind your PIN and biometrics. That said, given enough time and resources, a determined attacker with physical possession of a device is a real risk. If your phone is lost or stolen:

1. Restore your wallet on a new device using your recovery phrase.
2. Move funds to a fresh wallet if you suspect the attacker may succeed in unlocking the lost device.
3. Use your phone's "Find my" service to remote-wipe if available.

What if I lost my recovery phrase but the app still works?

The fix:

1. Generate a new wallet in the app (with a fresh recovery phrase).
2. Back up the new recovery phrase securely.
3. Migrate your funds from the old wallet to the new one.
4. Delete the old wallet from the app.

mallow doesn't recognize my recovery phrase. Why?

A few common reasons:

• Word order or spelling errors. Even one wrong word will derive a different wallet. Check each word against the BIP-39 wordlist.
• Different derivation path. If the phrase is accepted but the address isn't the one you expected, your other wallet derived it differently. Tap the settings icon in the account picker and turn on Show legacy Solana accounts. A wallet that uses a custom path beyond those will still produce a different address.
• Different word count. Make sure you are entering the right number of words (12 or 24).

General FAQ

Does mallow ever see my private key or recovery phrase?

No. For a wallet you create or import from a recovery phrase, both are generated and stored locally on your device, encrypted by the iOS Keychain or the Android Keystore, and never leave it. The app is open source, so you can check that claim in the code.

Social sign-in works differently: those keys are reconstructed through Web3Auth from your Google or Apple identity, so they can be reproduced by anyone who can complete that login. See Social sign-in is a different custody model.

Does mallow take a fee on transactions?

The app does not charge a fee on send, receive, or hold. You pay the network fee required by the chain (e.g., Solana priority fees, Ethereum gas).

Swaps carry a 0.5% mallow fee. It is attached to every swap as an integrator fee through Jupiter's referral programme, on top of whatever spread or routing fee Jupiter itself applies.

Buying, selling, and minting on mallow's marketplace have their own fees, listed on the Fees page. For a purchase or a sale, the confirmation sheet shows the mallow fee before you sign.

Why can't I buy, list, mint, or swap on iOS?

Because of App Store rules, the iOS app doesn't include buying, bidding, offers, listing, minting, token swaps, or liquid staking. The Android app and mallow.art have all of them, and they use the same wallets and the same listings.

The iOS app can still do everything needed to finish something you started elsewhere: cancel a listing or an offer, settle an auction, and claim what you won. See What the iOS app leaves out.

How do swaps work?

Swaps are in the Android app only. On Solana, swap quotes are routed through Jupiter, the leading Solana DEX aggregator. The app requests a quote, you review it, and your device signs the transaction locally; Jupiter then broadcasts and confirms it. Your keys never leave the device and mallow does not custody your funds during the swap. Steps and settings are under Swapping.

What does AirPlay / Cast do?

The app shows artworks you own or created on an AirPlay (Apple TV) or Chromecast display you select. Only the artwork goes to that screen. The app never sends keys, balances, or private data. See Casting to a screen.

Do I have to use social sign-in?

No. Social sign-in (Google or Apple) is one of two ways to create a wallet. The other is a standard recovery-phrase flow.

The two have genuinely different custody models, so pick deliberately. A social wallet has no recovery phrase and is restored by signing in again, which makes its security equal to the security of your Google or Apple account plus the Web3Auth key network. That one login reconstructs the keys for all three chains, so it is your whole wallet at stake, not one chain of it. See Social sign-in is a different custody model for the full picture.

Why do I need to grant push permission?

You don't have to. Push notifications are optional — without them, you will simply not get alerts for incoming transactions or marketplace activity. You can change your choice anytime in your device's settings.

Why does the app ask me to authenticate again to view my recovery phrase?

Viewing your recovery phrase is the most sensitive operation in the app, so it demands re-authentication even on an unlocked device: biometrics first, with your PIN as the fallback. An unlocked phone left unattended cannot leak your phrase.

Note that ordinary transactions are not challenged by default. If you want them to be, enable step-up authentication under Settings → Security & Privacy — see Step-up authentication.

Where can I report a bug or get help?

• Bugs and feature requests: open an issue on mallow-labs/mallow-wallet, or start a discussion in our Discord. Please do not use a public issue for a security problem.
• Security vulnerabilities: [email protected] — see Reporting a vulnerability.
• Privacy or legal questions: [email protected].