Phobia Wallet

Open-source, non-custodial privacy wallet with Tor built in

18 blockchains in one encrypted vault — Monero as a full wallet — on Windows, Linux and Android.
No account · no email · no KYC · no tracking · no fee on your transfers.

⬇ Download the Beta · Verify a download · Build from source · Feature tour · Security · Docs · Telegram

Note

Phobia is in beta, and Umbrella Wallet is now Phobia Wallet — same code, same keys, same encrypted vault. A beta copy finds the newer Beta by itself; a stable 4.9.0 copy is never offered a beta, so install the Beta over it and the vault and settings stay. An Android copy installed before 7 October 2026 needs one reinstall (why).

Why Phobia

🔐 Your keys, your device The 24-word seed is made and encrypted on your device (Argon2id → AES-256-GCM) and never leaves it. There is no account and no server that knows you exist — nobody can freeze, seize or "recover" your funds.

🧅 Tor in the box One switch starts a bundled Tor client. A kill-switch fails closed, every kind of request gets its own circuit, and names never touch your DNS. The app tells you which server learns what.

🪙 One vault, 18 chains Bitcoin, Ethereum and every ERC-20, Monero as a real wallet, USDT on TRON, Solana, XRP and more — each one can receive, send, show its balance and read its history.

Key features

Privacy

• Bundled Tor with a fail-closed kill-switch and a separate circuit per purpose — on the phone too.
• Settings → Privacy lists every server the wallet contacts and what it learns; point any chain at your own node.
• Privacy Radar shows, before you send, what the transaction would reveal on-chain — analysed offline.
• No telemetry, no analytics, no crash reports. Nothing about you leaves the device.

Security

• Encrypted vault; your password again before every send; auto-lock; seed screens hidden from screenshots.
• Warnings for address poisoning, wrong-network addresses and look-alikes of your own; a duress password.
• One amount box with its unit on it, a review that puts warnings first, and a receipt for every send; an unclear broadcast is settled against the chain — never offered as a retry that would pay twice.
• Signed, attested releases with an SBOM; the code that derives keys and signs rebuilds byte for byte.

Money

• Monero through the real monero-wallet-rpc on your machine; Bitcoin with coin control, Taproot, PSBT and PayJoin.
• Tokens: every ERC-20, TRC-20, SPL (Token-2022 too) and TON jetton you hold.
• Swaps between any coins, each on its own network, to your own address — the route named before you pay.
• Staking for TRX, SOL and ATOM, signed in the wallet. No platform fee, ever.

Every day

• A balance chart drawn through your own transfers, an exchange-style market chart, Activity with fiat values and the whole history the wallet has read, CSV export, encrypted notes on transfers and names for addresses.
• 15 themes, 6 languages, desktop and phone layouts, updates that check their own checksums.

See all of it, screen by screen, in the feature tour.

Screenshots

Market — candles, volume, crosshair, over Tor	Security Center — what actually protects you, right now
Activity — every chain's history, with what it was worth	Receive — the network printed under every coin

_{The same wallet on Android, with its own Tor and Monero service · 15 themes}

Supported coins

Every row in the wallet prints the network under the coin name — sending on the wrong network is the most common way people lose money.

Coin	Receive	Balance	Send	History	Swap	Notes
Bitcoin (BTC)	✅	✅	✅	✅	✅	native SegWit, full HD scan, coin control, PSBT, PayJoin
Ethereum (ETH)	✅	✅	✅	✅	✅	+ every ERC-20 at the same address, fee in ETH
Litecoin (LTC)	✅	✅	✅	✅	✅	native SegWit, full HD scan
Dogecoin (DOGE)	✅	✅	✅	✅	✅
Bitcoin Cash (BCH)	✅	✅	✅	✅	✅	CashAddr
Monero (XMR)	✅	✅	✅	✅	✅	local monero-wallet-rpc, loopback only
Solana (SOL)	✅	✅	✅	✅	✅	+ SPL tokens, Token-2022 when its extensions allow
TRON (TRX)	✅	✅	✅	✅	✅	+ every TRC-20 at the same address
USDT (TRC-20)	✅	✅	✅	✅	✅	same address as TRX; fee paid in TRX
TON	✅	✅	✅	✅	🟡	wallet v4R2, jettons
Cardano (ADA)	✅	✅	✅	✅	✅	CIP-1852
Zcash (ZEC)	✅	✅	✅	✅	✅	transparent t1… only — not shielded
XRP Ledger (XRP)	✅	✅	✅	✅	✅	destination tag for exchange deposits
Stellar (XLM)	✅	✅	✅	✅	✅	memo for exchange deposits
Cosmos Hub (ATOM)	✅	✅	✅	✅	✅	memo; staked ATOM not counted in the balance
NEAR Protocol (NEAR)	✅	✅	✅	✅	✅	implicit account, to any .near name
Polkadot (DOT)	✅	✅	✅	✅	—	same account as Polkadot.js / Nova; no route trades native DOT
Nano (XNO)	✅	✅	✅	✅	✅	no fee — proof of work computed on your device
Decred (DCR)	✅	✅	✅	✅	✅	the BIP44 account of Trust Wallet / Ledger / Exodus
Linea (ETH)	✅	✅	✅	✅	—	history while you hold ETH there
zkSync Era (ETH)	✅	✅	✅	✅	—	history while you hold ETH there

Plus the native coin of the major EVM networks at your 0x address (BNB, MATIC, AVAX, FTM, CRO, and ETH on Arbitrum, Optimism and Base) — with history for each while you hold it, except Fantom and Cronos, which no source serves without an API key — and NFTs listed by name with no image fetch. 🟡 = a swap route exists but did not quote that coin when last checked. Per-chain detail: docs/12-coins-and-chains.md.

Download

The current build is the Beta of 14 October 2026, a GitHub pre-release; older builds are on the releases page. The icon on the right is what you will see once it is installed.

Windows installer	PhobiaWallet-Setup-Beta.exe
Windows portable	PhobiaWallet-Beta-win-x64-portable.exe — one file, no install
Linux	PhobiaWallet-Beta-linux-x64.tar.gz — Tor and Monero included
Android	PhobiaWallet-Beta-android.apk — Android 7.0+, how to install
Checksums	SHA256SUMS-Beta.txt

Check before you run anything:

sha256sum -c SHA256SUMS-Beta.txt --ignore-missing                      # the file is the one published
gh attestation verify PhobiaWallet-Setup-Beta.exe --repo thefear078/Phobia-Wallet   # and it was built here

Every file goes through the same chain before it reaches you, and every link of it can be checked without trusting this page:

flowchart LR
    A["Tagged commit<br/>on main"] --> B["CI gates<br/>tests · CodeQL · Semgrep<br/>device checks"]
    B --> C["Built on GitHub runners<br/>Windows · Linux · Android"]
    C --> D["Signed<br/>Authenticode · APK key"]
    D --> E["SHA256SUMS<br/>self-checked"]
    E --> F["Attested<br/>Sigstore provenance · SBOM"]
    F --> G["Release page"]
    G --> H(["You verify:<br/>checksum · signature<br/>attestation · rebuild"])
    classDef you fill:#1F3B2C,stroke:#7DCF8F,color:#fff
    class H you

Loading

Windows files and the APK are also signed by the author (Windows thumbprint 89C2D871C195D57C14D1911B6C47629DE052C553, self-signed for now; APK certificate in SECURITY.md). All the checks, and rebuilding it yourself: docs/BUILD_VERIFY.md. The release page also carries numbered copies (…-Beta-5…) — the same bytes, for older copies' updaters; you need only the files above.

Quick start

Use it

1. Create a wallet, or import any BIP39 phrase (12–24 words) — the addresses match the original wallet.
2. Write the 24 words on paper; the wallet then asks for three of them, to catch a mistake while it costs nothing.
3. Turn Tor on in Settings before you unlock, so no address is ever queried over clearnet.
4. Send a small test amount to any new address first. A blockchain transfer is final.

More in docs/getting-started.md and the user guides (also in Ukrainian).

Build from source

You need the .NET 8 SDK (pinned in global.json). Nothing else.

git clone https://github.com/thefear078/Phobia-Wallet.git
cd Phobia-Wallet
dotnet build desktop/Umbrella.Wallet.sln -c Release                                 # build
dotnet run --project desktop/src/Umbrella.Wallet.App                                # run
dotnet test desktop/Umbrella.Wallet.sln -c Release --filter "Category!=Live"        # ~2,000 offline tests

Installers, the portable exe, the Linux tarball and the Android APK: docs/building.md.

Architecture

flowchart LR
    subgraph Device["Your device"]
        direction TB
        UI["App — Avalonia UI<br/>desktop and phone layouts"]
        subgraph Core["Core — pure, offline, testable"]
            K["Keys and derivation<br/>BIP39 · BIP32 · SLIP-10 · sr25519"]
            P["Spend planning · fees<br/>Privacy Radar · address safety"]
            S["Transaction builders and signers<br/>one per chain format"]
        end
        subgraph Infra["Infrastructure — the only I/O"]
            V[("Encrypted vault<br/>Argon2id → AES-256-GCM")]
            H["PublicHttp<br/>one client, kill-switch"]
            T["Bundled Tor<br/>a circuit per purpose"]
            X["monero-wallet-rpc<br/>loopback, random login"]
        end
    end
    subgraph Net["Public networks"]
        E["Block explorers and RPC nodes"]
        R["Prices · swap routes · updates"]
        M["Monero node"]
    end
    UI --> Core
    UI --> Infra
    V -- "decrypted in memory only" --> K
    K --> S
    P --> S
    H --> T
    T --> E
    T --> R
    H -. "direct only when Tor-only is off" .-> E
    X -- "through Tor when on" --> M

    classDef secret fill:#2E1013,stroke:#EE3244,color:#fff
    class V,K,S secret

Loading

The rule the layout enforces: Core never touches the network, so every piece of money logic — derivation, coin selection, fee maths, amount parsing, transaction formats, privacy analysis — is tested offline against published vectors and real mainnet transactions. Everything that talks to the outside world lives in Infrastructure and goes through one Tor-aware client. Layers, data flow and the send path: docs/architecture.md.

Security and privacy

Sending is where a wallet loses people's money, so every chain's send takes the same guarded path:

flowchart LR
    A["Destination<br/>and amount"] --> B{"Valid for this network?<br/>A look-alike of one<br/>in your history?"}
    B -- "no" --> X["Stopped, with the reason"]
    B -- "yes" --> C["Coins and fee read<br/>over Tor"]
    C --> D["Review: fee, balance<br/>before and after,<br/>Privacy Radar"]
    D --> E["Your password"]
    E --> F["Signed on this device<br/>every signature verified"]
    F --> G["Broadcast on a<br/>separate Tor circuit"]
    G --> H{"Clear answer?"}
    H -- "yes" --> I(["Sent / refused"])
    H -- "no" --> J["Settled by transaction id —<br/>never a blind retry"]
    classDef stop fill:#2E1013,stroke:#EE3244,color:#fff
    class X stop

Loading

The step by step, with what each one prevents: docs/architecture.md.

Never leaves your device	Leaves it (behind Tor when Tor is on)
Your seed phrase and every private key	The addresses you look up
Your vault password	Transactions you broadcast
Your private transaction notes	Coin prices you fetch (one fixed list for everyone)

• SECURITY.md — how to report a vulnerability (privately, via an advisory), what is in scope, how we respond.
• THREAT_MODEL.md — what is defended, and where the defence ends.
• PRIVACY.md — every server the wallet contacts and what it learns.
• docs/SECURITY_REVIEW.md — the code read from an attacker's side: secrets in logs, memory, files at rest, local services.

No external audit has been done yet (AUDIT_STATUS.md). Please don't open a public issue for anything that could put funds at risk.

Quality

• 2,000+ offline tests on every push: derivation and signing pinned to official vectors and to transactions the networks accepted, amount parsing, spend planning, privacy on the wire (a SOCKS5 server reads each request's circuit, a listener proves the kill-switch opens no socket), and every screen rendered headless on desktop and phone.
• Device checks on every pull request: the APK on an Android emulator with its Tor bootstrapping, and the Linux build on a virtual display reaching check.torproject.org through its own Tor.
• Static analysis and supply chain: CodeQL, Semgrep, Dependabot, dependency review, gitleaks, secret scanning, OpenSSF Scorecard; Tor and Monero pinned to their projects' signed hashes; a reproducible-build check.
• Coverage published weekly. How it all fits together: docs/testing.md.

Results

Measured on 9–14 October 2026 against main and the current Beta — re-run them yourself with the commands in docs/testing.md and docs/BUILD_VERIFY.md.

Check	Result
Offline test suite	✅ 2,009 / 2,009 passed · rendered screens 4 / 4
Line coverage of the offline suite	Core 90.6 % — the money logic: derivation, signing, fees, parsing · Infrastructure 41.9 % (network code; the live tests cover it instead) · App 54.1 % · 58.5 % overall (by assembly)
Static analysis	✅ CodeQL: 0 open alerts · ✅ Semgrep: 0 findings — 76 rules over 427 C# files, the workflows and secrets
Live tests against real explorers and nodes	✅ 54 / 55 — the one left: both Decred explorers rate-limiting this machine (429) during the Decred send check
Android emulator: app starts, bundled Tor bootstraps	✅ passed
Linux desktop: the build reaches check.torproject.org through its own Tor	✅ passed
Release files against their checksum lists	✅ 11 / 11 byte for byte
Build attestations (Sigstore) · Windows signatures	✅ all verified · ✅ thumbprint 89C2…C553, timestamped
Decred send: a wrong-key payment from a real coin	✅ refused by mainnet only at the signature
Dependabot · secret scanning alerts	✅ 0 open · ✅ 0 open
OpenSSF Scorecard	6.2 / 10 before this round of fixes (workflow permissions, pinned packages, provenance on releases); most of the rest needs a second reviewer, fuzzing and the OpenSSF best-practices badge (live score)
External security audit	❌ none yet — AUDIT_STATUS.md

Roadmap

✅ Shipped	18 chains with send and history · Tor + kill-switch · Monero full wallet · swaps · staking · Security Center · Privacy Radar · PSBT and PayJoin · duress password · signed, attested releases with SBOM
🔜 Next	Seedless watch-only mode · Ledger / Trezor
🧪 Beta	Android, with its own Tor and Monero service
🗓 Planned	Byte-for-byte reproducible installers · a CA-issued Windows certificate · an external security audit
❌ Never	Advertising · telemetry · custody of your funds · venture funding

The full backlog: docs/ROADMAP.md · every release: CHANGELOG.md.

Contributing

Phobia is MIT-licensed and welcomes contributions — start with an issue labelled good first issue or help wanted.

• CONTRIBUTING.md — setup, tests, what a good pull request looks like.
• Add a coin · a language · a theme · fork it.

Anything that touches the send path, the vault or key derivation needs tests — those are the paths where a bug costs somebody their money.

Documentation

Use the wallet	Trust the wallet	Work on the wallet
Getting started	Security policy	Architecture
User guides · Українською	Threat model	Building
Android	Privacy	Testing and QA
Feature tour	Verify a release	Adding a chain
Coins and chains	Security self-review	Roadmap
Troubleshooting	The rules (MANIFESTO)	All documentation

The honest part

• A blockchain transfer is final — nobody can reverse it, not us, not a support desk.
• Lose the 24 words and the vault password and the funds are gone. That is what self-custody means.
• Tor hides your IP from explorers; it does not make a transparent chain private. Privacy Radar exists to show you what yours reveals.
• Zcash here is transparent addresses only, and is listed that way.
• No external security audit yet. Tests, public CI and this repository are evidence, not a substitute.

License

MIT for the code — LICENSE. The names and logos stay under TRADEMARK_POLICY.md (forking guide). Third-party components: THIRD_PARTY_NOTICES.md. Conduct: CODE_OF_CONDUCT.md.

---

the fear

_{An independent developer. No company, no investors, no board to answer to —
which is exactly why there is no tracking and no cut of your transfers.}

t.me/PhobiaStat · GitHub · TikTok @thefear078 · Reddit u/Particular_Lime_7004

_{Nobody there will ever ask you for your seed phrase.}

💖 Sponsor this work · Terms · Privacy Policy · Contact

_{© 2026 Phobia Wallet · by the fear}