W2QR is a client-side application that encrypts BIP-39 seed phrases into QR codes using honey encryption. It offers two security modes:

• Basic mode — QR + password. All encryption runs in-browser.
• Advanced mode — QR + password + authorization factor (device biometric, Google account, or TOTP authenticator). Includes disaster recovery via Google Account + device. Recovery codes are no longer generated or accepted.
• W2QR Card — A pre-printed physical or digital card with a QR code that becomes a wallet when activated with a password. Optionally upgradeable to Advanced multi-factor security.

W2QR also provides a built-in wallet for viewing addresses, checking balances, and managing assets — no external wallet software is required. Optionally, W2QR can act as an external signer for MetaMask (via the W2QR Connect Snap) or other wallets (via the W2QR Remote Signer extension).

W2QR does not hold funds or manage blockchain state. It derives temporary signing keys from your encrypted QR backup during time-limited sessions.

W2QR is non-custodial. We have no access to your seed phrase, password, private keys, signing keys, or funds. We cannot recover lost passwords or QR backups. We cannot reverse, modify, or cancel any blockchain transaction.

In Advanced mode, the W2QR server stores only KEK-wrapped ciphertext (encrypted authorization secret and one recovery share), linked to a hashed identifier — not to your Google email, wallet address, or any personal data. This server-side data is encrypted and cannot be used to access your wallet without your password.

W2QR stores a TOTP secret server-side (encrypted) for authenticator-based unlock. This secret is never included in QR codes and cannot be used to access your wallet without your password.

W2QR Cards create wallets through honey encryption. W2QR cannot determine which wallet a card will produce without the user’s password.

W2QR never receives, transmits, or stores your password, seed phrase (mnemonic), or private keys. All cryptographic operations — encryption, decryption, key derivation, and transaction signing — run entirely in your browser.

In Advanced mode, the server stores only KEK-encrypted ciphertext (authorization secret, recovery share, and optionally a TOTP secret). This encrypted data cannot be used to access your wallet without your password and a second authorization factor.

When you enroll a TOTP authenticator (Google Authenticator, Authy, or similar), a shared secret is generated and stored on the W2QR server, encrypted under the key management system. The secret is never included in your QR code.

TOTP verification is rate-limited (maximum 3 attempts per 30 seconds, lockout after 5 consecutive failures for 5 minutes). The server verifies the 6-digit code and, if correct, releases your encrypted authorization secret. The server never learns your password, seed phrase, or what the authorization secret protects.

A pre-printed plastic card contains a basic honey-encrypted QR code. Activation upgrades it to full Advanced security by adding an authorization secret, device biometric, and Google account binding.

After activation, the original card's QR remains valid as a Basic-mode backup. The activated (digital) QR contains the full multi-factor wallet. You are responsible for storing both securely.

If you lose all of the following simultaneously, your wallet is permanently unrecoverable and your funds will be lost:

• Your password
• Access to your registered device (biometric)
• Access to your Google Account
• Access to your authenticator app (if enrolled)

W2QR cannot recover your wallet under any circumstances. There is no "reset password via email" or account recovery process. This is by design — it is what makes W2QR non-custodial and secure.