docs · Reference

Security and non-custodial

What Bootpad holds, and what it refuses to hold.

Bootpad is non-custodial in the strict sense: there is no column in the database for a private key, no environment variable for one, and no code path that accepts one.

Signing in

Signing in means your wallet signs a short plain text message naming your address and a one time nonce. The nonce is bound to one purpose and refused the second time it is used.

the message your wallet is asked to sign

Bootpad: prove you control this wallet.

wallet: <your address>
nonce:  <one time>
purpose: sign-in

Note

The message is deliberately plain text rather than the Sign In With Solana format. Phantom refuses to sign SIWS shaped text through signMessage, with no popup and no error naming the field, so the plain form is the one that actually works.

What leaves your browser

Your public address.
A signature over the text above.
Nothing else. The mint keypair for a launch is generated in your browser and never sent.

Warning

Bootpad will never ask for a seed phrase or private key, in any flow, for any reason.