A W2QR Card is a physical card (or digital equivalent) that carries a pre-printed QR code. The QR code contains random data that, through honey encryption, becomes a real cryptocurrency wallet when you activate it with your password.

The key property: any password produces a valid wallet. The password you choose during activation determines which wallet the card creates. An attacker who obtains your card cannot determine which wallet it “really” holds without your password.

1. Go to Create Card
2. Choose a design template: Midnight (default), Ocean, Emerald, Graphite, or Light
3. Add a nickname and optional wallet code
4. Click Create Card to generate the QR code
5. Print the card or save the digital image

Cards follow the CR80/ID-1 standard (85.60 × 53.98 mm) — the same size as a credit card.

1. Go to Activate Card and scan or upload the card's QR code
2. Choose a strong password — this password, combined with the card's QR data, creates your unique wallet
3. Save your recovery phrase (12 BIP-39 words)
4. Choose a security level:
   • Basic — password-only protection, quick and simple
   • Advanced — adds Google account and biometric authentication as second factors

• ✓No password oracle — every password produces a valid wallet. There is no way to tell if a password is “correct” without checking the resulting wallet on the blockchain.
• ✓Plausible deniability — if someone obtains your card, they cannot prove which wallet it holds. Any password they try will produce a real wallet.
• ✓Brute-force resistance — Argon2id key derivation (64 MB, 3 iterations) makes each password attempt computationally expensive.
• ✓Optional multi-factor — upgrade to Advanced mode for Google + biometric protection on top of the password.

Card QR codes use the V4 envelope (basic honey encryption). The QR encodes a URL in the format:

The ds parameter contains the honey-encrypted payload. When activated with Advanced security, the data is re-encrypted as a V5 (V2A) packet.