M5 Vault

An M5 Vault has no recovery phrase and no complete private key. Key generation produces two shares held by two parties, and every signature needs both of them. Each party stores only its own encrypted share, and the full private key is never reconstructed.

Mobile app only

Vault key generation runs on your phone, so you create an M5 Vault in the M5wallet mobile app. In the browser extension, desktop app and web app, Create M5 Vault explains this and suggests Google sign-in or a seed phrase wallet instead.

There are two kinds of vault:

• Fast Vault uses one phone. The M5 signing server holds the second share, locked by your vault password.
• Secure Vault uses two of your own phones, paired with a QR code. Both take part in every signature.

Create a Fast Vault

1. In the mobile app, select Create new wallet → Create M5 Vault → Fast Vault (Quick).

2. Enter a Vault name, or keep M5 Fast Vault, and a Vault password.

   The vault password protects the second key share and authorizes signing. It cannot be recovered, so keep it safe.

3. Select Start Fast Vault. When Fast Vault ready appears, select Enter Wallet.

Create a Secure Vault

You need two phones with the M5wallet app. Keep both on the setup screen until the vault is ready.

1. On the first phone, select Create new wallet → Create M5 Vault → Secure Vault. Enter a Vault name and a Vault password, then select Start as Initiator. A QR code appears.

2. On the second phone, open the same Secure Vault screen and select Join as Companion.

3. Still on the second phone, select Scan Initiator QR and scan the first phone’s code. Enter a Vault password for this phone, then select Join Vault Session.

4. Wait on both phones while the status moves through Running 2-of-2 MPC key generation… to M5 Vault created successfully.

5. Select Enter Wallet.

Approve a transaction with a Secure Vault

When you sign on one phone, it shows Approve on your other device with a QR code. On the other phone, go to Create new wallet → Create M5 Vault → Approve a signature request, select Scan Signature Request and scan the code. When Signature approved appears, return to the first phone.

Networks

When you enter a vault, M5wallet creates addresses on EVM networks, Solana, Tron, Bitcoin, Litecoin and Dogecoin.