QRDX Wallet
Install the wallet, back it up, understand your two addresses, and connect it to sites.
QRDX Wallet holds your keys and signs everything you do on QRDX. It runs in three places from one codebase, and a recovery phrase moves between them.
| Browser extension | iPhone app | Web app | |
|---|---|---|---|
| Install | Chrome Web Store / Firefox Add-ons, via wallet.qrdx.org | Safari → Share → Add to Home Screen | Open wallet.qrdx.org/wallet |
| Sites connect by | the injected provider (automatic) | QR code (QRDX Connect) | QR code (QRDX Connect) |
| Biometric unlock | passkey, where the browser supports it | Face ID / Touch ID (iOS 18+) | passkey, where supported |
| Stays unlocked | until auto-lock or the browser closes | locks 30 s after you leave the app (adjustable) | locks on reload |
| Auto-lock default | 15 min | 5 min | 10 min |
Install the iPhone app from Safari
Safari deletes the storage of websites you have not visited for seven days. An app added to the home screen is exempt. Whatever you use, your recovery phrase is the real backup.
Your recovery phrase
The wallet creates a 12-word BIP-39 phrase. It restores every account and both keys of each: the classic secp256k1 key (path m/44'/60'/0'/0/i) and the ML-DSA-65 post-quantum key, whose seed is derived from the same phrase. Write it down and keep it offline. Anyone with the phrase controls the wallet.
Exporting the phrase, a private key or a keystore always asks for your password again, and anything you copy is cleared from the clipboard after 60 seconds.
Two addresses per account
Every account shows two addresses:
0x…: the classic address. Ethereum tools understand it, andeth_sendTransactionspends from it.0xPQ…: the post-quantum address. Trading, pools, perps and token operations are signed with its key, and on QRDX it is the address that holds your exchange balances.
They are two separate balances. Send QRDX to the 0xPQ… address to trade. Accounts explains why.
An account made from an imported private key gets a post-quantum key derived from that classic key. It works, but it is only as strong as the classic key, and the wallet labels it classical PQ. Create accounts from a recovery phrase to get a real post-quantum key.
Connecting to a site
Sites ask the wallet to connect; you choose which accounts to share. After that, every signature and transaction opens an approval screen showing:
- the site's real origin (taken from the browser, not from the site), with a warning when its name looks like a well-known site it is not (
uniswop.org,qrdx-airdrop.xyz), uses look-alike international characters, or is a bare IP address, - what you are signing, decoded: "Buy 10 QRDX at 920 USDC", "Swap 1,000 USDC for at least 1.08 QRDX",
- for an EVM transaction, the result of running it against the latest block first: whether it would succeed (or why it would revert) and the balance changes and token allowances it carries,
- the maximum fee,
- warnings for unknown tokens, swaps without a minimum output, and token approvals.
The look-alike check works on the site's name alone; there is no list of known scam sites behind it yet, so a site with an unremarkable name passes.
From a phone, a site shows a QR code. In the wallet choose Connect to a site and scan it (or scan with the camera). The connection is end-to-end encrypted through a relay; you approve each request on the phone. Approve only a code you just scanned from your own screen.
Security in brief
- Keys are encrypted with AES-256-GCM under a data key wrapped by your password (PBKDF2-SHA256, 600,000 iterations) or a passkey.
- After five wrong passwords, unlocking slows down: 30 s, doubling up to an hour.
- Before signing, the wallet checks that the node really serves the chain you selected.
eth_sign, which signs arbitrary hashes, is disabled.
More in Wallet security.
What the wallet can do
Send and receive QRDX and tokens, swap, trade spot and perps markets, provide liquidity, delegate or run a validator, hold and send NFTs, and connect to sites. The Trade screen uses the same markets and numbers as trade.qrdx.org.
- Balances lead with their value in your currency (Settings → Currency), with the QRDX amount and the day's change underneath.
- Accounts. Tap the account name to switch accounts, see each one's balance, or add one.
- Token pages. Tap a token for its price chart (1 hour to 1 month), your balance on each address, its supply and authorities, and your activity in it. Hide a token you don't want listed; All tokens → Show hidden brings it back.
- Every send is reviewed before it is signed: recipient, amount in your currency, account, network, fee and total, with a warning for an address you have never sent to. Stakes and NFT transfers are reviewed the same way.
- Recipients. The send form suggests the people you sent to recently, your other accounts and your contacts; typing filters them. On a network with QRDX names (qrdx-node's 2026-10 release) you can type a
name.qrdx: the form looks it up and shows the address it points to now, which is what the transaction is sent to. - Names (Settings → Names, on networks with QRDX names): register
name.qrdx(0.0125 QRDX a year for 5 or more characters), renew it, point it at your account, and make it your primary name, which the wallet's home and Receive screen, explorers and other wallets show for the account. A newly registered name becomes your primary name in the same approval unless you untick it. - Contacts by name. Add a contact by typing its
name.qrdx(Settings → Address Book), or save one from the send form after sending to a name. The contact keeps the address the name pointed to when you saved it, so a name its owner re-points never redirects your sends; the send form warns when the two differ. Other accounts' primary names show in your activity and recipient suggestions. - Account control (Settings → Account control): bind another wallet or a multisig as a controller, add a delay to changes this key signs, name recovery guardians, cancel waiting changes, turn this key off, and revoke trading keys sites added. See account control.
- Scan to send. The send form's Scan button reads an address, a
name.qrdxor a payment QR code (qrdx:orethereum:links fill the amount too) with the camera. - Exchange accounts (More → Trade → Accounts): your perps account, with collateral to deposit or withdraw, and your sub-accounts: their balances and positions, creating one, moving QRDX or a token in and out, and funding a sub-account's perps from its own balance.
- Trading for free. On a network with the 2026-10 free trading lane, an order, cancel, edit, stop or swap is sent at gas price 0 while your account has free actions left; the approval says Network fee: Free, or why it pays. Several operations approved together go as one transaction there, all or nothing.
- Activity comes from the node's transaction index, so it shows everything the account did or received, from any device. Tap a transaction for its details, to send again, or to save the other party as a contact. On Ethereum and other EVM networks, a pending transaction can be sped up or cancelled (resent at the same nonce with a higher fee); QRDX nodes don't accept replacements, and a QRDX block comes every 250 ms.
- Explore lists what trades on the network: its markets with price, 24-hour change and volume, the perpetuals, and new token launches.
- Swap lets you set a custom maximum slippage and how long a signed swap stays valid.
- Notifications (Settings → Notifications): funds received, your sends confirming or failing, and price alerts you set. They are checked while the wallet is open.