Skip to main content

I only use a hardware wallet (Biometric, Card, DCENT X). Does the App Wallet notice apply to me?

Based on: the status report and the "Check if affected" guide (blog as of 2026-09-17). (Last updated 2026-10-07)

The action applies to the App Wallet (software wallet). If you only use a hardware wallet, you are not a direct target. However, if you have ever entered your recovery phrase into an App Wallet, you may be affected — see the additional check below.

1. Seeing a hardware wallet balance in the app does not make it an App Wallet​

Even when you use a hardware wallet, you check balances and send from the DCENT app. The app is only a screen for display and operation; the private key stays inside the device's secure chip, which is why every transfer must be approved on the device. Seeing assets in the app does not turn it into an App Wallet. There is only one criterion: has that wallet's recovery phrase ever been entered into an App Wallet?

2. When you are affected​

  • You have entered (restored) a hardware wallet's recovery phrase into an App Wallet.
  • You restored a hardware wallet using a recovery phrase created in an App Wallet.
  • The App Wallet and the hardware wallet show the same account address on the same network.

If any of these apply, the two wallets use the same private key. Regardless of where the recovery phrase was generated, treat the entire recovery phrase as exposed, and move even the hardware wallet's assets to a wallet created with a new recovery phrase. Do not go back to the old wallet.

3. How to check without entering your recovery phrase​

Open the receiving address for the same network (for example, Ethereum) in both wallets and compare them on screen. If the first six characters, the last six, and a middle section all match, they share the same recovery phrase.

warning

People most often lose assets while trying to check. Never enter your recovery phrase into a website, an inquiry form, a DM, a third-party "inspection tool," or the App Wallet's restore menu. No legitimate check ever requires entering your recovery phrase.

4. If you use a passphrase (25th word)​

App Wallets do not support passphrases, so a wallet protected by 24 words + a passphrase cannot have been created in an App Wallet. If you have never restored that wallet in an App Wallet, it is out of scope. However, if the 24 words were ever entered into an App Wallet, relying on the passphrase alone is not recommended.

5. If you are unsure​

Never share your recovery phrase, private key, PIN, or password with anyone — including DCENT.