Mobile Wallet

The 0xio Mobile App is the 0xio Octra wallet for iOS and Android. Built with React Native 0.86 and Expo SDK 57, it runs the same pvac-rs privacy engine as the other clients, natively on the phone.

Mobile-Exclusive Features

PIN & Biometric Security

The mobile app keeps your keys in the device’s secure storage and unlocks with a PIN or biometrics.

• PIN Code: Set a 6-digit PIN with rate-limited retry protection.
• Stays locked: once the wallet locks (auto-lock, Lock now or too many wrong PINs), closing and reopening the app keeps it locked until you unlock it.
• FaceID / TouchID: Log in and sign transactions using your unique biometric signature.
• Every transaction is confirmed: each send, approval, signature and connection ends on a review you confirm with a slide, whether or not a PIN or biometrics are set. Tap outside the review to back out. With Ask before sending on (Settings, Security), the PIN or biometric check follows the slide, and turning it off asks for it first. No address skips this check.
• Secure Storage: Your encrypted keys are protected by the device’s hardware-backed Keychain/Keystore.

Push Notifications

Stay informed with real-time alerts for incoming transactions, claim-ready private transfers, and network events.

DApp Browser

Browse and interact with Octra dApps directly from the mobile wallet without leaving the app. The start page lists the ecosystem’s sites by category, with your recent sites below. One bar at the top of the start page takes anything you type:

• An app name or words: matching apps, your recent sites, then a web search.
• An Octra address (or a payment request): Send to this address, Open in Octrascan, or Save as contact.
• A transaction hash: your matching transaction, and Open in Octrascan.
• An oct:// address: a circle hosted on Octra, read from the chain. Public circle pages load with their images, scripts and stylesheets, and files stored as chunks are put back together and checked against their hashes first (see Chunked Circle Files). Sealed circles ask for their passphrase.
• Anything else: opened as a site.

Scan sits beside the bar. While you browse, the address sits at the bottom within reach of your thumb. A lock shows only on https pages, plain http is marked not secure, and a green dot means the site is connected to your wallet. Only https sites can reach the wallet; a plain http page can be read but cannot connect. The … menu next to the address reloads the page, shares its link, opens it in your phone’s browser, switches the network (after asking) and disconnects the site. Every request from a site opens in its own sheet naming the site and the wallet it acts for, one request at a time:

• Connect lists what the site can see (your address and balance), what it can ask (signatures you review), any private permissions, and that it can never move funds on its own. Tap Change to connect another wallet. Slide to connect.
• Sign a message shows the whole message. Signing moves no funds and costs no fee. Slide to sign.
• A transaction shows a receipt: what it does, the amount with its USD value, the recipient, the fee, the network and your wallet. A contract call shows its arguments exactly as they are signed. Slide to approve.

With Ask for PIN before signing on, Face ID or the PIN follows the slide. A request to sign a transaction without sending it says the site can send what you sign, a transaction the site signed earlier is only sent after you approve it, and sites cannot submit through raw RPC calls. If you switch wallet or network before a request is signed, nothing is signed or sent. A site connection lasts 24 hours.

Browser Settings

Tap the gear on the Browse start page:

• Connected sites for this wallet and network.
• Ask for PIN before signing (on by default). Turning it off asks for your PIN or biometrics.
• Search with DuckDuckGo, Brave or Google.
• Outside links open in 0xio or your phone’s browser.
• Keep recent sites (on by default, 30 days).
• Warn on lookalike sites (on by default).
• Clear recent sites and Clear site data, each with two taps.

Lookalike Site Warnings

A site whose name is spelt close to an app listed in the browser, or is written in another alphabet, is marked Lookalike next to its address. Before it can connect, sign, send or switch network, a red warning names the app it resembles. Close refuses the request; Continue goes on if you meant to open that site. Listed apps are never flagged.

Connect a dApp (WalletConnect)

Use a dApp on another device from your phone: tap the scan icon on the home screen. The camera opens on the code; you can also paste a connection link. The connect sheet shows the site, the wallet and the network, each with Change, and warns when the site asked for another network. Slide to connect. A watch-only wallet cannot connect, since it cannot sign. Sites are named by the address WalletConnect verified for them:

• Verified: the sheet shows the site’s verified address.
• Not verified: the sheet shows the name the site gave, tagged Unverified. A name spelt like a listed app is tagged Lookalike.
• Invalid or flagged: a site whose address fails verification, or one flagged as a scam, is refused before any sheet opens.

Request sheets carry the same tag. Contract calls show their arguments exactly as they are signed. Live sessions are listed on the same screen as wallet on network, each with Disconnect (two taps). A session stays with the wallet and network it was approved on: if the app is on another one later, its requests ask you to switch back or reconnect. A connection request that arrives after you leave the screen is refused, never approved unseen. Requests from a connected site use the same sheets and slide as the browser.

Connected Sites

Settings > Connected dApps (or Browser settings) lists every site by wallet and network, the one you are on first. Tap a site to see what it sees, can ask and can never do, and Disconnect it (two taps) for that wallet and network only. WalletConnect sessions are listed below, and Disconnect all clears everything.

Collectables

The NFTs tab opens on your newest piece, then a shelf per collection. Pull down to refresh. Tap a piece for its art, status, traits and more from its collection.

• Send a piece to an address, a contact or one of your wallets.
• List for sale, Change price or Cancel listing on a supported market, with the price in OCT or USD. The first listing approves the market for that piece only.
• Each step ends on a review you slide to confirm.
• Hide a piece or a whole collection from More, with Undo. Hidden, under the last shelf, shows them again. Hidden pieces are kept per wallet and network.
• A piece you send leaves the gallery at once and its page shows Sent.
• Tap + to import a collection.
• Art and living NFT programs stored in a circle as chunks are put back together and checked against their hashes before they show (see Chunked Circle Files).

Address Book

Save and label frequently used addresses. Search by name or address, tap a contact to send to it or copy its address, and edit or delete it (two taps). The app says when an address is not valid or is already saved.

Multi-Wallet Support

Create or import multiple wallets and switch between them from the wallet list (tap the wallet name on Home, or swipe from the left edge). All wallets use the same master root key derivation as the extension and desktop. Add a wallet is one sheet: Create new wallet, Derive account from a recovery phrase already on the phone, and under Already have one: Recovery phrase, Private key or Watch an address. Rename a wallet from the wallet list or Settings: a sheet with the wallet’s picture, quick names (Savings, Daily, Trading, Cold) and its full address.

Wallet Pictures

Every wallet has its own picture, drawn from its address: the 0xio braces around a composition of circles, in muted colours. It appears on the home screen, in the wallet list, in the address picker and on the Receive screen. The same address always draws the same picture, and the browser extension draws it identically, so a wallet looks the same on your phone and in your browser and the wrong one stands out before you read its address.

History

History follows your wallet’s address on every network the app knows (mainnet, devnet and your own nodes), newest first, with each entry marked with its network and chips to filter to one. It loads more as you scroll, and you can pull down to refresh. Entries read as sentences: Received from, Sent to or Sent privately, with a contact or wallet name where the app knows one. NFT and token transfers show what actually moved. Tap an entry for its receipt: the amount with its USD value and status, To and From with names and full addresses, the time, the network, the fee and the total, then the transaction hash to copy, Send again or Send back, Save contact for a new sender, and View on Octrascan on the transaction’s own network.

Your Own Node

Add a network in Settings > Network by giving the node’s address. The app checks that the node answers as an Octra node as you type, fills in a name, and asks you to confirm you trust the node with your address and what you sign. You choose whether it supports private balances and can add an explorer. Removing a network asks first; removing the one you are on moves the app to Octra Mainnet. Settings > Advanced > Test connection checks the network you are on: whether the node answers and how fast, whether it answers as Octra, its latest epoch, private balances, and the backup route.

Stealth Transfers

Send private FHE-encrypted transfers where the amount is hidden from everyone except the recipient.

Bulk Send

Bulk sends are available in 0xio Desktop and the browser extension. The mobile app sends to one recipient at a time.

Optional RPC Proxy

By default, balances and history come straight from the Octra node. Turn on the RPC proxy in Settings > Advanced to route mainnet and devnet requests through the 0xio proxy, which compresses history responses for slow connections. The proxy is never used silently as a fallback, and a network you add yourself never uses it.

Sentry Crash Reporting

Crash reports help fix problems quickly. They never include keys, recovery phrases or PINs, and you can turn them off under Crash reports in Settings; see the Privacy Policy for what is sent.

Dynamic Recommended Fees

The app recommends different OU fee amounts per operation type (standard transfer, FHE encrypt, decrypt, etc.) based on current network conditions.

• Every fee is the network’s live quote for that operation: a transfer, a token send or NFT action (a contract call), encrypt, decrypt, a private send or a claim. No default fee is ever shown or signed.
• A fee that cannot be read shows Unavailable and Could not read the network fee. Try again. The review and the slide stay off until a live fee exists.
• The fee on the review is the fee signed, as long as the network still accepts it. You are asked to review again only when the network’s minimum fee rises above it: The network fee changed. Review again.
• A site, circle or WalletConnect request uses the site’s fee only when the network accepts it, else the live recommended fee. Without a live fee the request is refused before the approval opens.
• Fast is offered only when the network quotes it; otherwise the fee sheet shows Standard and Custom.
• Private operations have floors: key switch, encrypt, decrypt and private send 5,000 OU, claim 3,000 OU.
• A custom fee below the network minimum or above 10,000,000 OU cannot be used. See Network Fees.

Private Balance Status

When your private balance cannot be used as is (the network holds it for a migration, its key needs an update, or it was made by an older version), a tag sits beside your balance on Home. Tap it to see why and, when your account allows it, re-register your encryption key.

Stealth Claim Caching

Previously claimed stealth transfers are cached locally, so the claim scan only processes new transfers on subsequent runs.

---

Core Functionality

Dashboard & Balances

The Home Screen shows your total balance over a faint chart of the day’s worth. Drag across the chart to read the worth and change at any moment, and pull down on your assets to refresh. Send, Receive and Privacy sit right below, and only your asset list scrolls. Tap the eye beside the balance to hide amounts. Each asset shows its name over its symbol, the amount and its USD value, or No price yet. Tap one for its page: Octra has Send, Receive and Encrypt with your public activity; Private OCT has Send, Receive and Decrypt with your private activity only; a custom token shows its contract and decimals, and one you imported can be removed. The glass bar at the bottom switches between Wallet, History, Browse and NFTs: tap a tab, or hold the bar and slide your finger to carry the lens to another tab. While the app starts its FHE engine, a small Initializing FHE pill shows above the bar and you can keep using the wallet.

Receiving

Receive shows your QR code and address. Type an amount on its keypad to turn the QR into a payment request; Share request sends it as a link. Someone scanning it with 0xio gets your address and the amount filled in. See Payment Requests for the format.

Sending Assets

The Send Flow is optimized for one-handed use:

• Pick a recipient: type or paste an address, or choose a contact or a recent recipient. With nobody saved yet, your other wallets are listed.
• Scan to Pay: scan an address, or a payment request that fills in the amount too.
• Private sends: pick Private OCT to send privately.
• Slide to send on the review. You can close the progress screen while it runs; the result arrives as a notice.
• Not confirmed: when the app cannot tell whether a send went through, it checks the network first. If it still cannot tell, the send stays pending and says Check History before sending again. See Not Confirmed.

Privacy Suite (FHE)

Tap Privacy on Home for a sheet over your wallet:

1. Encrypt: Move funds from Public -> Private.
2. Decrypt: Move funds from Private -> Public.
3. Waiting for you: incoming private transfers, each with Claim, and Claim all, which claims them one at a time with Pause and Stop.

A private balance can carry a limited number of encrypted layers. When an encrypt, decrypt or private send meets that limit, the review says the balance is refreshed first, shows the fee for both transactions, and one slide runs both. Private actions follow the proof rules the network states, read before you prepare and again right before signing. When the network does not state them, private actions pause and nothing is sent. See Network Proof Rules.

---

Getting Started

Creating a Wallet

1. Install the app from 0xio.xyz/install.
2. Tap Create a wallet.
3. Set a PIN and biometrics to protect the wallet on this phone. If the app closes before the PIN is set, it reopens on this step, never on Home.
4. Name your wallet and copy its address on Your wallet is ready.
5. Back up your recovery phrase: tap the Back up pill on Home. After your PIN, hold to show your 12 words, write them down in order offline, then tap I wrote them down. Until you do, Receive reminds you first.

Importing

Already have the Browser Extension or another 0xio wallet?

1. Tap I already have a wallet.
2. Type, paste or scan your recovery phrase (12 or 24 words) or private key into the one field. The app tells which it is and flags typos.
3. Check the wallet it found, with its address and balance, then import it. Your public and private balances sync automatically.

Watching an Address

From the wallet list, tap Add a wallet, then Watch an address, and paste or scan any oct... address. The app shows its balance and latest activity before you add it. A watched wallet holds no keys, so it can never send.

---

Network Support

The mobile app supports multiple Octra networks: Switch networks in Settings > Network. Devnet is recommended for testing FHE features such as encrypted balances, private transfers, and the encrypt/decrypt flow.