Questions worth a straight answer

No. Your keys are generated on your phone and encrypted there under your passcode. Aura has no copy, no escrow account and no administrative key. What you hold, you hold directly on each chain.

Your wallet keeps working, because it was never hosted. Your twelve words restore the same addresses in any standards-compliant wallet — that portability is the whole reason to use open derivation standards rather than a proprietary scheme.

No, and this cuts both ways. Nobody here can block a transfer, unwind a mistake or claw back funds sent to a scammer — not for a court, not for you, not in an emergency. A signed transaction is final the moment the network accepts it.

Neither. There is no account, so there is nothing to sign in to and nothing to lock you out of. Installing the app and writing down twelve words is the entire onboarding.

Not if you have your recovery phrase. Install Aura on the new phone, choose Restore, enter the twelve words, and every address comes back with its balances and history intact — the history lives on the chains, not in the app.

Then the funds are unreachable, by anyone, permanently. There is no reset link and no support path, because there is no account and we hold nothing that could open your wallet. This is the cost of self-custody, and it is why the phrase deserves a serious hiding place.

You are fine. Reinstall and restore from the phrase, then set a new passcode. The passcode only protects the copy of the phrase sealed on that one device.

No. It is one file, sealed on your phone under a passphrase you choose, written to your own iCloud or Google Drive. We store neither the file nor anything that would open it. Forget that passphrase and the file is noise.

Sixty-nine: 47 EVM chains plus 22 other ecosystems including Solana, Bitcoin and its forks, Cosmos, Cardano, Polkadot, TON, Sui, Aptos, XRP, Stellar, Tezos and Monero. Each is derived at its own registered coin type and path rather than one key reused wherever the format allows.

Your phone asks Jupiter, LI.FI, Uniswap, 0x and Relay at the same time and shows you what each returned. Requests are independent, so a router that is slow or has no route simply is not the one you use. The best quote is the one that gets signed.

Quote requests go from your device straight to the routers, so no server of ours sees what you are pricing. Once you submit a swap, the app does register it with our backend so it can follow a cross-chain hop and tell you when the far side lands.

Yes — pick a token on one network and a token on another and it is handled as a swap with two chains in it. Aura shows you every hop, the provider taking it and the fee before you commit.

The app is free. What you pay on a swap is the network fee and whatever the winning router charges, both shown on the quote before you sign.

Public addresses go to RPC nodes and, optionally, to our balance indexer; token identifiers go out for prices and logos; a push token and any addresses you asked us to watch are stored if you enable incoming-transfer notifications. Your phrase, your keys and your passcode are never transmitted. The security page lists every flow row by row.

Never, under any circumstances. There is no support scenario that requires it. Anyone asking — in a DM, an email, a form, a call — is attacking you, whatever name they are using.

Yes. Add it as a watch-only wallet to follow a treasury, a cold address or a friend. No key is imported and nothing can be spent from it.

The primitives are named in full on the security page: BIP-39 for the phrase, BIP-32 and BIP-44 for derivation, XSalsa20-Poly1305 for the sealed phrase, PBKDF2-HMAC-SHA512 for the key, and the platform keystore at rest. Judge them on their own terms rather than on an adjective.