Encrypted vault
Wallet credentials are encrypted before being stored by the extension and are unlocked only when required by an authorized flow.
Security & transparency
Security is a workflow, not a slogan.
Nora Wallet is designed to make sensitive boundaries visible and to keep control in the user's hands.
Secret-aware workflows
Backups and destructive wallet operations use dedicated verification paths. Secret material is kept out of ordinary UI state and logs.
Origin-scoped permissions
Each connected website receives its own permission record, which can be reviewed and revoked from Settings.
Approval before action
Dedicated windows show the requesting origin, account, network, and request details before signing or connection.
Lock controls
Manual lock, idle auto-lock, and progressive unlock delays reduce exposure when a browser session is unattended.
Release checks
Automated tests cover core wallet, provider, approval, transaction, network, swap, and cross-chain behavior.
Know the limits
No wallet can eliminate blockchain risk.
Smart contracts, dApps, tokens, RPC endpoints, routing providers, and user devices can fail or be malicious. Always verify what you sign, use small test amounts, and maintain an offline recovery backup.
Nora Wallet cannot recover lost secrets Blockchain transactions may be irreversible Provider availability and quotes can change Experimental features require extra caution
Report responsibly
Contact securityFound a security issue?
Do not disclose it publicly or include wallet credentials. Send a reproducible report to the security contact.