Is Gem Wallet Safe?
Short Answerâ
Gem Wallet is built so that no one but you can move your crypto, not even Gem Wallet. Your keys are created and stored only on your device, the code is public, and independent firms audit it. The app also warns you about risky tokens, addresses, websites, and signatures before you confirm anything.
No wallet can protect a Secret Phrase you give away, though. Most crypto losses come from scams, not from the wallet app itself.
How Gem Wallet Protects Your Cryptoâ
You're the only one with your keysâ
Gem Wallet is a self-custodial wallet. Your Secret Phrase and private keys are created on your device and never leave it. Gem Wallet doesn't keep a copy, so it can't freeze, move, or recover your funds. See What Is a Self-Custodial Wallet?.
Your keys are encrypted on your deviceâ
Keys are stored encrypted with AES-256. On iPhone and iPad, Gem Wallet also uses Apple's Secure Enclave. Your Secret Phrase follows the BIP-39 standard, so you can restore it in other compatible wallets if you ever need to. See What Happens to My Crypto If Gem Wallet Stops Working?.
The code is public and auditedâ
Gem Wallet is open source, so anyone can check how it handles your keys and transactions. Its code has been audited by Cure53 (October 2026) and CertiK (April 2026). See Is Gem Wallet Open Source? for the reports and how to report a security issue.
The app is lockedâ
You can lock Gem Wallet with Face ID, Touch ID, a fingerprint, or your device passcode. See How to Lock Gem Wallet with Face ID, Touch ID, or a Passcode.
Built-In Warningsâ
Gem Wallet checks for common scams before you confirm:
| What it checks | What you see | Learn more |
|---|---|---|
| Tokens | Unverified and Suspicious labels, and a Suspicious Asset banner | Unverified and Suspicious Tokens |
| Recipient addresses | A warning, or a blocked send, for addresses linked to scams | What Is an Address-Poisoning Scam? |
| Websites you connect to | Verified, Unknown, or Scam status, and blocked requests from malicious sites | WalletConnect Domain Verification |
| Signatures and approvals | A preview of what changes, with warnings for unlimited approvals, permits, and risky spenders | How to Review a Transaction Simulation |
| Accounts others may control | A warning before you send to an externally controlled account | Externally Controlled Account |
| Your device | A Security Warning on rooted or jailbroken devices | Don't Use Rooted or Jailbroken Devices |
Privacyâ
The Gem Wallet app has no analytics or advertising trackers. Some limited technical data, such as IP addresses, is processed to run the service, as described in the privacy policy.
What Stays Your Responsibilityâ
Gem Wallet can't protect you from everything. Keep yourself safe by following these rules:
- Back up your Secret Phrase offline, and never store it in screenshots, notes apps, or the cloud. See Securing your Secret Phrase.
- Never share your Secret Phrase or private key with anyone, including people claiming to be Gem Wallet support.
- Download Gem Wallet only from official sources. See How to Recognize a Fake Gem Wallet App.
- Ignore "validate" or "sync" requests from websites and strangers. See Why Is a Website Asking Me to "Validate" or "Sync" My Wallet?.
- Check every request before you confirm. See How to Review a Transaction Before You Confirm.
If you think your wallet is at risk, follow What to Do If Your Secret Phrase Is Exposed.