IronWallet, a non-custodial multi-chain wallet with more than 3 million users by 2026, operates without KYC and gives its developers no way to freeze accounts, move assets, or recover a lost password. The wallet's privacy policy blocks Apple Store and Google Analytics, and the company behind it — INWAY AG, registered in Liechtenstein — says it cannot identify who holds the wallet because it collects no name, email, phone number, or government ID.
No account to break into
Unlike custodial wallets where a company holds the keys, IronWallet generates and stores a user's private keys and 12-word seed phrase entirely on the device. There is no IronWallet 'account' on a central server that an attacker could compromise. The company has no recovery email, no phone-linked two-factor authentication, and no way to identify the wallet holder externally. If a user loses the device without backing up the seed phrase, the wallet is gone forever — no one at INWAY AG can help.
That same custody model is used by Trust Wallet and MetaMask, but IronWallet takes the privacy design a step further: automatically generated log data (IP addresses, device types, operating systems) is protected and not linked to personal identity. The wallet also blocks tracking services by default under a privacy policy governed by Liechtenstein law and fully implementing GDPR.
Wallet-side security features
Device-level security includes PIN code lock, biometric authentication (Face ID and fingerprint), end-to-end encrypted Web3 connections, and local private key signing. When users connect to external dApps through WalletConnect, the communication between the wallet and the dApp is encrypted, so transaction data isn't exposed in transit.
The wallet supports more than 10,000 assets, gasless stablecoin transfers, and recently integrated WalletConnect Pay, which began rolling out in January 2026 across 120+ countries through the Ingenico payment terminal network. IronWallet is listed on both the official Apple App Store and Google Play Store with verified developer status and consistent 4+ star user ratings. The company also has an active profile on Trustpilot with public user reviews.
What the trade-offs mean
The same features that protect privacy also create risks for the careless. Without any form of account recovery, a stolen or broken phone can mean total loss of funds if the seed phrase wasn't backed up. The company cannot reverse transactions, freeze a compromised wallet, or reset a forgotten PIN. Users are solely responsible for securing the 12-word phrase — often stored on paper or metal plates, never in a cloud service tied to identity.
For those comfortable with self-custody, IronWallet offers a level of anonymity that few regulated exchanges or custodial wallets can match. But that anonymity cuts both ways: law enforcement or victims of theft have no backdoor, no KYC trail, and no company to subpoena for user data. The wallet's privacy policy explicitly blocks Google Analytics and Apple Store analytics, meaning even basic usage statistics are not collected.
The WalletConnect Pay integration through Ingenico terminals is scheduled for continued expansion through 2026, though no specific next-phase dates have been announced. For now, the wallet remains a tool for users who accept full responsibility — and full risk.
