Security · Non-custodial wallet · 2026
AstraVault
A non-custodial Ethereum wallet built from the standards up: HD key derivation, encrypted storage and EIP-1559 signing.
- Encryption
- AES-256-GCM
- KDF
- PBKDF2 · 310k iter.
- Derivation
- BIP-32 / 44
- Signing
- EIP-1559 · EIP-191
01 The problem
A wallet is only as safe as its key handling. Many wallet projects wrap an SDK and never touch the parts that matter: how the seed is generated, how keys are derived, how secrets are stored and how long they live in memory.
AstraVault implements the key-management path directly: mnemonic generation, hierarchical deterministic derivation, encrypted storage at rest, session-only decrypted keys, and transaction and message signing to current Ethereum standards.
02 How it works
Hover or tap a step
03 What I built
- 01BIP-39 12-word mnemonics (128-bit entropy) with BIP-32/BIP-44 derivation on m/44'/60'/0'/0/i for unlimited accounts.
- 02Secrets encrypted at rest with AES-256-GCM, keyed by PBKDF2 at 310,000 iterations with unique salts.
- 03Decrypted keys live only in memory and are wiped on refresh or tab close.
- 04EIP-1559 fee estimation, a two-step send review, ERC-20 discovery by address, and EIP-191 message signing and verification.
04 Key decisions
- The Web Crypto API (SubtleCrypto) is used instead of JS crypto libraries, so key material never passes through userland implementations.
- Two-stage transaction review to prevent accidental broadcasts.