×How it works
Seven approvals, in order.
From the first tap to the chain, one send at a time. Devnet only so far, and not audited.
One send,start to finish.
Seven approvals in a fixed order. Then the send ends in one of three ways.
- 01StartToken, address, amount.
- 02Face IDYour face opens a passkey.
- 03PINSix digits only you know.
- 04IntentYou read it, then accept.
- 05Trusted phoneThis phone signs it.
- 06Final reviewFour words must match.
- 07PasswordYour last word.
- ThenOn chainOne of three results.
Sent
View in explorerIt landed on Solana. Open it in the explorer.
Waiting · releases 18:24
04:58
Cancel sendOnly if you switch a safeguard on. You can cancel until it releases.
Failed
Network busy. Nothing was sent.
The network said no. The reason is plain and nothing moved.
The app, on any screen
The seven checks,one by one.
You pass them in order. Each one has to clear before the next one opens.
Check 1 of 7
Start
Pick the token, the address and the amount. Nothing moves yet.
Check 2 of 7
Face ID
Your face opens the signing screen.
Check 3 of 7
PIN
A second secret, typed on this phone.
Check 4 of 7
Intent
Read what will happen, then accept it.
Check 5 of 7
Trusted phone
This phone approves it with its own key.
Check 6 of 7
Final review
Four words. They must match what you saw.
Check 7 of 7
Password
The last word is yours. Then it sends.
×The fingerprint
Every approvalis pressed to one send.
Auro makes a fingerprint of this exact send: the token, the address, the amount. Each of the seven approvals is tied to it.
- AddressChange one letter. The send stops.
- AmountChange one digit. The send stops.
- TimeTen minutes pass. The send times out.
×Where each secret lives
Four are yours.One is ours.
| Secret | Lives | We keep |
|---|---|---|
| Your face | Inside your phone, behind Face ID. | The passkey’s public half. |
| PIN | In your head. | A salted hash. Never the PIN. |
| Device key | In this phone’s browser storage. It cannot be exported. | The public half. |
| Password | With you. | A salted hash. |
| Vault key | On Auro’s servers, one per account. | The key itself. |
The vault key is the trade you make with us: the rules run on our servers, not in a contract. Read the risks.
A thief getsless than you think.
Three things can be stolen. None of them moves a coin on its own.
Stolen phone
Still shut.
It needs your face, your PIN and your password before a coin can move.
Stolen password
Reads. Cannot send.
On another phone it opens a read-only safe. Send stays off.
Stolen 24 words
Starts a 72-hour wait.
Your old phone can cancel it. The words never spend.
×Before you sign
A dry runbefore any tap.
Auro builds the exact transaction and runs it through a Solana simulation first. If the network would refuse it, the send does not start.
- FeeShown in SOL before you approve anything.
- DepositUSDC to a new address adds a one-time account deposit. It is shown too.
- BalanceIt has to cover the amount and the fee, or the send never starts.
×Under the hood
Plain wordsfor how it works.
- 01Each account gets its own vault wallet on Solana. Its key is made on our server and never touches your phone.
- 02Your phone sends a request. It drops past seven gates.
- 03Every gate checks the same transaction fingerprint. The vault signs only if all seven pass.
- 04No smart contract, so nothing to deploy and no contract to attack. The vault pays its own network fee. Your 24 words never spend.
×Final review
Read it beforeyou sign it.
Auro turns the raw transaction into plain words. Four words must match on both screens.
- Send0.1 SOL
- To7xKX…gAsU
- Network fee0.000005 SOL
- New addresswaits 1 hour
- lantern
- harbor
- anchor
- violet
Nothing else moves.
