This wallet runs on the test network (no real money) and is not published in the browser stores yet. It has not been audited.
Browser wallet for Stellar · Chrome & Firefox
One wallet from your first purchase to your first dApp — no switching required.
Stellar wallets come in two flavours today: simple ones for getting started, powerful ones for developers. Outgrow the first and you have to move. We are building the other thing: one interface that ships beginner-friendly and unlocks developer features only when you actually need them.
Not published yet. Store links will appear here once review by the Chrome Web Store and Mozilla Add-ons is complete.
Schematic views of the 360 × 600 pixel popup. They show the planned layout, not finished product shots — the wallet is still in development.
A single setting decides how much of the interface you see. No second download, no "pro tier", no separate codebase. This is the complete list of what the switch changes.
| Surface | Beginner | Developer |
|---|---|---|
| Network selection | Testnet or main network — the main network only after a typed confirmation | Futurenet on top (custom endpoint planned, not selectable yet) |
| Transaction view | plain-language summary only | plain language + expandable XDR/Base64 |
| Soroban contract calls | blocked, with an explanation | signing allowed; argument decoding still missing |
| dApp connector | disabled (no content script) | active, with an origin allowlist |
| Trustlines | "Add asset" (short curated list) | any issuer, editable limit |
| Multisig | hidden | signer overview (read-only in phase 1) |
| Fee | automatic | manual override |
| Reserves | explained as "reserved for your account" | numeric breakdown |
Beginner mode uses everyday words for these: trustline → asset approval · reserves → reserved account balance · fee → network fee · sign → confirm · seed → recovery key · mnemonic → recovery phrase.
Developer mode is turned on in settings, behind a warning, and stays visible afterwards through a persistent badge in the header. The wallet never switches on its own. In beginner mode no content script is registered in web pages at all — beginners simply have no attack surface from the web.
A wallet is worth exactly as much as the trust you can place in its internals. So here are the four claims we want to be held to, in plain language.
A decrypted recovery key never leaves the extension’s protected background process. Only an encrypted blob is stored; the decrypted form exists in memory alone, and only while the wallet is unlocked. There is no server of ours that could ever see it. The one deliberate exception: you can ask to see your own recovery phrase — only on an explicit request, and only after entering your password again. Without that route there would be no backup.
No analytics call, no crash reporting, no usage statistics. Network traffic goes exclusively to the Stellar endpoints you configured yourself. This website loads nothing from third parties either — no cookies, no external fonts, no CDN.
The extension never fetches executable code: no CDN, no eval, no dynamic imports from foreign URLs. What you install is exactly what runs — a hard requirement of both Chrome and Mozilla store review, and the only defensible way to build this anyway.
The full source is public. Trust should come from being able to check, not from a promise on a marketing page. And where something is still missing — an external audit, for instance — we say so.
The Stellar wallet market is fragmented, and the established wallets are good at what they were built for. This table only lists points our market research actually documents. Where we found nothing solid, it says "not researched" — not "no".
| Feature | Aubergine | LOBSTR | Freighter | xBull |
|---|---|---|---|---|
| Beginner-friendly out of the box | yes beginner mode is the shipping default | yes consumer wallet, explicitly aimed at getting started | no aimed at developers | partial aimed at traders and developers |
| Soroban smart contracts and dApp connector | partial developer mode only; contract arguments not yet decoded | no no | yes the ecosystem’s central dApp connector | yes developer / dApp category |
| Both audiences in one switchable interface | yes yes | no no | no no | not researched not researched |
| Plain-language transaction preview by default | yes with warnings on risky operations | not researched not researched | not researched not researched | not researched not researched |
| Open source | yes yes | not researched not researched | yes yes | yes on GitHub |
| Firefox extension | yes Chrome and Firefox from one codebase | no iOS, Android, Chrome extension | not researched not researched | yes Chrome, Firefox, web, desktop |
| Buy with fiat inside the wallet | no phase 1: interface prepared only | yes card, bank, Apple/Google Pay | partial anchor integration on the roadmap | not researched not researched |
| Multisig | partial read-only in phase 1, no co-signing | yes LOBSTR Vaults | not researched not researched | not researched not researched |
| Hardware wallet (Ledger) | no not a phase 1 goal | yes yes | yes yes | not researched not researched |
| WalletConnect | no no | yes yes | not researched not researched | not researched not researched |
| Passkey sign-in | no password + Argon2id | not researched not researched | not researched not researched | yes introduced with version 2 |
| German-language interface, DACH focus | yes German and English as equals | not researched no visible DACH focus | not researched no visible DACH focus | not researched no visible DACH focus |
| Maturity | no test network, unpublished, unaudited | yes 1M+ users, 4.7 of 5 across 30,000+ reviews | yes since 2020, the Stellar Development Foundation’s wallet | yes version 2 shipped |
✓ yes · ~ partial · – no · ? not researched
Based on our internal market research (August 2026), drawing on the vendors’ public material, the Stellar blog and the browser stores. Competitor details may have changed since.
Deliberately left out: security audits, fee models, user numbers for the smaller vendors, competitors’ privacy behaviour, and detailed swap/DEX comparisons. We have no solid sources for those, and guesses have no place in a comparison table.
The extension is not published yet. It goes to the stores once the test-network phase is done and the core features are stable.
Both builds come from one codebase (Manifest V3). The links will appear right here once store review is through.
The source is public and can be loaded as an unpacked extension in your browser. That path is meant for developers and testers, not for everyday use.
Short, honest answers. Where something is still open, it says so.
Beginner mode shows only what you need to send, receive and check your balance — in plain language, with no network picker and no raw data. Developer mode unlocks the network picker, the XDR view, Soroban contract calls, dApp connections, arbitrary asset approvals, manual fees and the signer overview. Same wallet, same account — just more surface.
On your device only, encrypted in your browser’s storage. Unlocking runs your password through Argon2id to derive the key that opens the encrypted blob. The decrypted recovery key exists only in the background process’s memory and is overwritten after use, as far as JavaScript allows that (see the security page). There is no server it could be uploaded to.
Only for trying it out on the test network. Test network means no real money — balances there have no value. Mainnet release comes once the core features are stable and reviewed.
No. There is no external security audit, and we will not pretend otherwise. Until then you get open source, a documented threat model and a deliberately small attack surface — but no guarantee. Do not use a recovery phrase on the test network that also protects real funds.
We charge nothing for the extension. Network fees for transactions go to the Stellar network, not to us. We do not sell data — we do not collect any.
Then you need your recovery phrase, the sequence of words shown to you during setup. With it you can restore your account in this wallet or any other compatible Stellar wallet. Without the password and without the phrase, nobody can help you — us included. That is the price of nobody else having access.
That is the goal. The interface we expose to web pages deliberately follows the established Freighter-style signature so existing apps work unchanged. We are not inventing a new standard. The interface is only active in developer mode.
No. The extension contains no analytics, telemetry or crash-reporting calls. This website sets no cookies, embeds nothing from third parties and serves fonts from its own server. What the host logs at a technical level is described in the privacy policy.
Chrome and Chromium-based browsers plus Firefox, both on Manifest V3 from a shared codebase. A mobile app is not planned for phase 1.
Because the existing ones are good — each for one half of the journey. Start with a beginner wallet today and you have to switch the moment you want to use a dApp. That break is what we want to remove. And because almost no wallet currently shows up in German-speaking Europe with a fully German interface and a European view of data protection.