Features
Two levels of protection, one wallet
AirNox Wallet is a complete desktop wallet on its own. AirGap adds an offline phone for the funds that matter most.
Three setups side by side
- The usual setup
A classic extension wallet
It runs inside the most exposed program on the computer. Its secrets are sealed with encryption that modern graphics cards brute-force at scale.
- Level 1
AirNox Wallet on the desktop
Native C++, with no script engine to inject into. The seed sits in memory only while needed, every request is decoded and screened, and stored secrets are sealed with Argon2id and the TPM 2.0 chip.
- Level 2, AirGap
AirNox Vault on a phone
The seed moves to an offline phone. An attacker who owns the whole operating system finds nothing on the computer to copy.
Article 01 · 5 min
Keys off the computer
Most thefts of crypto do not break cryptography. They start on an ordinary computer. AirNox Wallet is designed for that computer, and it works on the assumption that the computer is already lost.
Assume the computer is compromised
Article 02 · 5 min
Mass Adoption Security
The device that holds your keys should be the hardest one to attack in transit and the easiest one to set up. We think that device is already in your drawer.
Mass Adoption Security: the signer is a phone you already own
Article 03 · 4 min
Three ways across the gap
An air gap is only useful if you keep using it. Every signature needs a request to cross one way and a signature to cross back, and the carrier for that should fit the moment.
Three ways across the gap: QR codes, Bluetooth LE and NFC
Article 04 · 4 min
Invisible on the air
A radio that announces "wallet here" would undo half the point of an offline signer. So a phone running AirNox Vault does not announce itself.
Invisible on the air: a signer nobody can scan for
Article 05 · 4 min
The transport is never trusted
Radios have a poor security record. Rather than argue about which one is safe enough, AirNox assumes none of them is, and builds the security one layer up.
The transport is never trusted
Article 06 · 5 min
Decoded on the phone
Most wallet thefts happen with the owner's consent. A page shows one thing, the wallet signs another, and the owner clicked Confirm. The phone's job is to make sure that what you see is what you sign.
What the phone shows you: transaction analysis on the signer
A picture of the address
Compare two pictures, not two strings
Address poisoning and clipboard hijackers make the same bet: that you look at the first few characters of an address, the last few, and nothing in between.
We wrote a small open-source library that turns the whole address into a picture. The offline phone is the screen you trust: if something on the online machine changed the address after you checked it, the two screens disagree, and comparing two pictures takes a second.
- poisoning transfers
- 270M
- targeted addresses
- 17.4M
- payments to a lookalike
- 6,633
- lost, at least
- $83.8M
Ethereum and BSC, July 2022 to June 2024. Source: USENIX Security 2025.
Article 07 · 4 min
A journal the desktop cannot touch
When something looks wrong, you want a record you can trust. The desktop's history is kept on the machine we assume is compromised. So the phone keeps its own.
The phone keeps its own record
Article 08 · 4 min
A vault that resists guessing
The desktop side of AirNox holds no signing keys in AirGap mode, but it still holds things worth protecting: which wallets you have, which addresses are yours, your address book, your settings. All of that lives in one encrypted profile.
The vault on your desktop: Argon2id and a profile that resists guessing
Article 09 · 4 min
dApps without a browser wallet
Websites expect a wallet in the browser. The browser is the most exposed program on the computer. AirNox resolves that with an extension that looks like a wallet to the page and holds nothing at all.
dApps without a browser wallet
Article 10 · 4 min
An MCP server with rules
AI agents are starting to handle money. They need a wallet that can say no. AirNox Wallet has one built in.
An MCP server with rules: AI agents under limits
Article 11 · 5 min
One protected wallet for all of it
All the security in this series protects an ordinary, complete wallet. You should not have to give up networks, swaps or bridges to keep your keys offline.
One protected wallet for all of it
Article 12 · 3 min
Small and native
A wallet is a security program. It should be small enough to audit, fast enough to forget about, and free of moving parts that are not its own.
Small and native: C++, no JavaScript runtime, from a workstation to a Raspberry Pi
Join the waitlist
Leave your email and we will send release news. Nothing else.