About StellarKey

What StellarKey is

StellarKey is free, open-source, self-custodial software for using the Stellar network. It is a wallet interface and local merchant tool, not a bank, exchange, custodian, money transmitter, asset issuer, accountant, or recovery service. The application does not open a hosted StellarKey account or take possession of assets.

A software wallet creates and encrypts its recovery material in this browser. A supported hardware wallet keeps its signing authority on that device. A watch-only account contains a public address but no signing secret. In every case, you decide which transaction to authorize and remain responsible for protecting every available recovery path.

How a wallet action works

A typical payment or swap follows the same local-first sequence:

1. The browser unlocks the encrypted vault locally or connects to the selected signer.
2. StellarKey reads public account and network state from the selected Horizon or RPC endpoint and constructs an unsigned transaction in the browser.
3. You review the network, operations, addresses, assets, amounts, fees, and memo.
4. The software key signs locally, or Trezor is asked to display and sign the transaction. Watch-only accounts cannot sign.
5. The signed transaction is sent directly to the selected Stellar service. StellarKey then checks the network for confirmation and presents the transaction hash and final status.

A displayed estimate, quote, balance, or pending state is not a ledger guarantee. The accepted transaction and the authoritative Stellar ledger are the final record.

Where data lives

The production release is a backend-free static web application. The encrypted wallet vault, contacts, private notes, optional passkey wrapper, encrypted merchant records, and local settings stay inside this browser profile. They are not synchronized between devices. Clearing site data, removing the browser profile, changing origin, or losing the device can remove access unless you have a working recovery phrase or encrypted backup.

Public balances and activity come directly from the Stellar network through the Horizon or RPC endpoint selected in Settings. Optional features may also contact issuer-controlled asset domains, market-data services, Friendbot on testnet, and Trezor Connect. The Privacy page explains what those direct requests reveal.

Signing and unlock choices

• Software wallet: the secret is encrypted at rest and opened only for a scoped signing, derivation, or export action while the vault is unlocked.
• Trezor: supported Stellar transactions are reviewed and signed on the connected device. StellarKey does not receive the device recovery phrase or private key.
• Watch-only: the app can display public account data but cannot authorize transactions for that account.
• Passkey unlock: on compatible secure origins, WebAuthn PRF can unwrap the same local vault key after device verification. This is a convenience unlock, not a Stellar smart account, portable backup, or replacement for the wallet password and recovery material.

Merchant mode

Merchant mode turns one unlocked wallet and browser into a single-device point of sale. Staff, shifts, orders, invoices, customer records, cash and external-card tenders, refunds, and reports remain encrypted locally. Crypto charges are matched against Horizon while the app is active; foreground monitoring pauses when the browser or operating system suspends the app and reconciles after it becomes active again.

Merchant mode is an operational aid, not cloud accounting, guaranteed payment monitoring, tax filing, card processing, or a durable off-device archive. Export records regularly and reconcile them against the ledger and your other payment providers.

Open source and releases

StellarKey’s original source is free software licensed under AGPL-3.0-or-later. You can inspect the source repository, study how sensitive flows are implemented, and exercise the rights granted by that license. Bundled dependencies keep their own licenses; in particular, Trezor Connect is a separately licensed component and is not relicensed under the AGPL.

You are reading the trust center for StellarKey release 1.0.0. The release identifier also appears in Security and the wallet sidebar so reports can name the affected build.

Full build commit

Compare this full 40-character SHA with the published source commit and its corresponding GitHub release. The same identity is available as machine-readable JSON at /release.json. A clean manifest ties this build to that exact tracked source revision.

A commit label is useful provenance, but it is not by itself proof that a device, host, dependency, or build environment is uncompromised. For a release decision, also verify the published artifact checksums and software bill of materials, or reproduce the static build from the named source.

Independence

StellarKey is independent software, not affiliated with, sponsored or endorsed by the Stellar Development Foundation. “Stellar” is a trademark of the Stellar Development Foundation. References to Stellar describe the network on which this software operates.