Article 1 · Getting Started
Setting up your wallet for the first time
Setup takes about five minutes and walks you through three things that matter: signing in, locking the wallet to you, and saving a recovery file in case you ever lose this device.
Before you begin
Have one Apple, Google, or Microsoft account handy. Be near a place you can save a small file securely - a password manager, an encrypted USB drive, or a printer for a paper backup.
What you will do
- Sign in with an account you already trust. Pick Apple, Google, or Microsoft. We use the account only to identify you. We never read your email or files.
- Read the non-custody acknowledgment. One screen, one paragraph, one checkbox. The wallet is yours alone. Signing uses MPC cosigning; the default path still reconstructs a secret server-side until threshold ECDSA ships. This is the deal you are making.
- Pick a display name. Optional. Used only inside the app. Not on the blockchain.
- Add Face ID or Touch ID. One-tap unlock on this device. Your face or fingerprint never leaves your phone.
- Add an authenticator app. Open Google Authenticator, Authy, or 1Password. Scan the code we show you. Enter the six-digit number it gives you back.
- Download your recovery file. A small .json file. This is the single most important file in your wallet. Save it somewhere only you can access.
- Verify the recovery file. Upload it back to us. We check it locally on your device to confirm it is real. Nothing is sent anywhere.
- You are in. Your wallet address appears. Tap to copy. You can always find it under Receive.
Where to save your recovery file
Pick at least one of these. Two is better.
- A reputable password manager (1Password, Bitwarden, Apple Passwords)
- An encrypted USB drive you keep in a safe
- Printed on paper, kept in a fireproof safe or safe deposit box
Do not
Do not email the file to yourself. Do not store it in a plain unencrypted cloud folder. Do not screenshot it and leave it in your camera roll. If anyone gets the file and they know it is a JIL recovery file, they have your wallet.
Common questions
What happens if I lose my phone but I still have my sign-in account?
Sign in on a new device using the same Apple, Google, or Microsoft account. Your wallet restores. Your authenticator app needs to be set up again - that is what your backup codes are for.
What happens if I lose both my phone AND my sign-in account?
Your recovery file gets you back in. Install JIL Wallet on a new device, choose "Restore from recovery file," and upload it.
What if I lose everything?
If you lose your phone, your sign-in account, AND your recovery file, recovery depends on the controls you enrolled. JIL retains one platform shard by design (gate + asset + post-quantum protection of the key) - that is not a back door that resets your wallet on request. Save the recovery file well.
Why can't JIL just reset my wallet?
Because this is not an exchange omnibus account. JIL retains one shard so identity and policy bind to the asset, and so the key can be post-quantum protected. You still authorize every sign. There is no “reset my wallet” button that ignores those controls.
Ready to set up?
Setup takes about five minutes. Have your recovery storage ready.
Open JIL Wallet →
Article 2 · Moving Assets
Receiving tokens to your wallet
To get tokens into your wallet, you give the sender your wallet address. The address is a long string of letters and numbers that points specifically to you. It is safe to share publicly.
What you will do
- Tap Receive on the home screen. You can also tap any asset and choose Receive from its detail screen.
- Pick the asset. If you are receiving JIL or any wrapped token, the network defaults to Ethereum. Other assets show their native networks.
- Confirm the network. This is the most common source of mistakes in crypto. The sender must use the same network. Sending on the wrong network is very hard to recover from.
- Share your address. Tap Copy, scan the QR code from the sender's device, or use the share sheet to send it via text or email.
- Wait. Most transfers settle in under five minutes. Some networks are faster. You will get a notification when funds arrive.
- Safety checks run automatically. When the transfer is detected, JIL runs 234 safety checks on the incoming funds before crediting your wallet. This usually takes a few seconds.
Sending from an exchange
If the sender is on Coinbase, Kraken, Gemini, Binance, or another exchange:
- Look for "Withdraw" or "Send" in the exchange app
- Paste your JIL address
- Choose the network shown on your Receive screen (usually Ethereum)
- If the exchange asks for a "memo" or "destination tag" - leave it blank. JIL does not use those.
Your address is safe to share
Unlike a bank account number, your wallet address only lets people send you assets. It does not let them take anything. Posting it on social media to receive payments is normal and safe.
Common questions
How long do incoming transfers take?
On Ethereum, usually one to five minutes. On faster networks like Base or Arbitrum, often under a minute. If thirty minutes pass with nothing, ask the sender to share the transaction hash and contact support.
Why did I see "Verifying transfer" before the funds appeared?
That is JIL running incoming-side safety checks. We look for things like known stolen funds, sanctioned addresses, and abnormal patterns. If anything is concerning, we will tell you.
The sender says they sent it but I don't see anything. What do I check?
Ask for the transaction hash. Paste it into etherscan.io (for Ethereum). If the transaction shows there but not in your wallet, contact support - there is likely a network mismatch. If it does not show on etherscan either, the sender's transaction may not have broadcast.
Article 3 · Moving Assets
Sending tokens from your wallet
Sending is the heart of what a wallet does. JIL adds a safety layer most wallets do not have: before any send leaves your wallet, we run 332 checks to make sure you are not about to do something you would regret.
What you will do
- Tap Send. From the home screen or from the asset you want to send.
- Enter the destination address. Paste, scan a QR code, or pick from your saved contacts. Always check the first six and last six characters of the address match what you expect.
- Enter the amount. Use the USD toggle if it helps you think in dollars. Tap Max to send your entire balance minus the network fee.
- Pick your speed. Standard is fine for almost everything. Fast costs slightly more in network fees and gets confirmed quicker.
- Review the safety check results. JIL runs all 332 checks. You see the result. Green means everything looks clean. Amber means there is something to know but you can proceed. Red means we strongly recommend you stop.
- Sign with Face ID, Touch ID, or your passcode. This is the moment the transaction is authorized. Only you can do this.
- Watch it confirm. The transaction broadcasts and confirms on the network. Most sends finalize in under a minute.
- Get your receipt. A Court Ready Evidence Bundle (CREB) is generated and anchored. This is your permanent record of the transaction. Find it in History.
When a transaction is blocked
If the safety checks return a red result, the wallet will not let you send. A few common reasons:
- The destination address is on a known scam list
- The destination is a sanctioned address (OFAC list)
- The destination address has received stolen funds in the past
- The amount or pattern is consistent with a phishing attack on you
If you believe the block is wrong, contact support. We will review with you. We do not change blocks lightly.
Address poisoning
Scammers often send tiny transactions from addresses that look almost identical to addresses you have used before - same first four characters, same last four. Always check the middle of the address too, or pick from your saved contacts.
Common questions
What is the network fee for?
It pays the network (not JIL) to process your transaction. Ethereum charges in ETH. Other networks charge in their native coin. JIL does not take any of the network fee.
What is a CREB?
Court Ready Evidence Bundle. It is your signed, anchored receipt of the transaction including every safety check we ran. If you ever need to prove this transaction happened - to an exchange, an auditor, a court - the CREB is the document of record.
My transaction has been pending for an hour. What do I do?
Some networks slow down during high traffic. If a send is pending more than 30 minutes, contact support. We can help you replace the transaction with a higher fee version (called "speed up") or cancel it if it has not been mined yet.
Can I cancel a send after I signed?
If it has already confirmed on the network, no. Blockchain transactions are final. If it is still pending, sometimes yes - contact support quickly.
Article 4 · Moving Assets
Moving tokens from your hardware wallet into JIL
A hardware wallet - Ledger, Trezor, or similar - is a small physical device that stores your keys offline. Moving assets from a hardware wallet into JIL is the same as any send, but the signing happens on the physical device instead of in an app.
What you need
Your hardware wallet device, the manufacturer's app (Ledger Live, Trezor Suite, or equivalent), and the cable or Bluetooth pairing to connect it to your computer or phone.
What you will do
- In JIL, open Receive. Choose "I am sending from a hardware wallet." We will give you your JIL address and walk you through the rest.
- Open your hardware wallet's app. Ledger Live or Trezor Suite. Connect your device.
- Start a send from the app. Pick the asset and paste the JIL address you copied. Choose the same network shown in JIL.
- Confirm the address on your device screen. Your hardware wallet shows the destination address on its physical screen. The first six and last six characters must match the JIL address exactly. This is your defense against malware on your computer.
- Approve the send on your device. Press the physical buttons. This is the moment the transaction is signed.
- Return to JIL. The wallet watches for the incoming transfer and notifies you when it arrives.
- Safety checks run. JIL confirms the funds came from your declared hardware wallet, not a spoofed one.
Important
Always verify the address on your hardware device screen, not just on your computer. Malware can change what your computer shows you. It cannot change what your hardware wallet shows you.
Common questions
Why do I need to verify on the device screen if the address is already on my computer?
Malware called "clipboard hijacking" silently replaces wallet addresses you copy. If your computer is compromised, the address you paste might not be the one you intended. Your hardware wallet's screen is independent - it shows the true destination.
Can I use JIL with my Ledger as the signing device for everything?
That is a different setup called "JIL with hardware backing." It is not the same as this recipe. Contact support if you want to walk through that option.
My Ledger isn't connecting. What do I check?
Make sure the device is unlocked with your PIN, the right asset app is open on the device (open the Bitcoin app for BTC, the Ethereum app for ETH and JIL, and so on), and that Ledger Live is the latest version. Restart Ledger Live if needed.
Article 5 · Moving Assets
Moving tokens from JIL to your hardware wallet
Moving assets to a hardware wallet is the most common way to put them in long-term cold storage. JIL adds one extra protection here that is unique to us: we verify the destination address actually belongs to a hardware wallet you have claimed.
What you will do
- From the home screen, tap Send and choose "To my hardware wallet." Or look for the cold storage tile.
- Claim your hardware wallet (first time only). If this is the first time you are sending to this device, JIL will pair with it briefly to read the address. We never read your keys. The pairing is just so we can verify the destination on every future send.
- Choose what you are sending and how much. Pick the asset, enter the amount, see the network fee.
- Review the safety check results. The key check here is the destination match - JIL confirms the destination address matches your claimed hardware wallet. If it does not, the send is blocked. This is what stops a particular kind of attack where funds leave correctly but go to a wallet that is not yours.
- Confirm on your hardware wallet screen. Look at your Ledger or Trezor. The address shown there must match the address shown in JIL. Compare character by character. If they do not match, reject on the device immediately.
- Approve on the device. Press the physical buttons. The transaction signs and broadcasts.
- Watch confirmation. Most sends to a hardware wallet confirm in under a minute on Ethereum L2s, longer on Ethereum mainnet.
- Get your CREB receipt. Your signed evidence bundle is anchored to history.
Why JIL re-verifies the destination
In 2022 the Ronin Bridge was attacked: funds left correctly, but the destination was silently changed. The CREB and JIL's destination-match check exist specifically to detect this class of attack. The check costs you about three seconds and protects you from one of the worst categories of crypto loss.
How "claim" works
A claim is JIL remembering "this hardware wallet is yours." It is permanent by default. Once a year, we will quietly ask you to confirm it is still your device. Any unusually large send to it will also re-verify, as a safety measure.
You can retire a hardware wallet at any time from Settings → Hardware Wallets.
Common questions
What if I get a new hardware wallet?
Claim it the first time you send to it. The old claim stays on file but goes inactive after a year of no use. You can manually retire it any time.
Can someone send my hardware wallet address to JIL and claim it as theirs?
No. Claiming requires either pairing with the physical device or signing a small free attestation transaction from the device. Neither is possible without holding the device and its PIN.
I lost my hardware wallet. What now?
If the device had assets on it, your hardware wallet's seed phrase is what restores them onto a new device. JIL cannot help with that - Ledger and Trezor handle their own seed phrases. In JIL, retire the old claim and claim the replacement.
Article 6 · Inside JIL
Bridging tokens between chains
A bridge moves the same asset from one blockchain to another. If you hold USDC on Ethereum and want USDC on Base, you bridge. JIL's bridge runs an attestation on both ends - leaving the source chain and arriving on the destination - so you have proof of both halves.
Bridge fee
JIL charges 0.50% to bridge. The destination chain also charges a small network fee. Both are shown before you confirm.
What you will do
- Tap Bridge on the home screen. Or open an asset and choose Bridge from its detail menu.
- Pick the asset you want to move. Not all assets bridge to all chains. The bridge interface only shows valid combinations.
- Choose the source and destination chains. Source defaults to where you currently hold the asset. Destination is where you want it to land.
- Enter the amount. The bridge shows the fee and the estimated time for each leg.
- Two-leg safety check. JIL attests the source-chain side and the destination-chain side independently. You see both results before signing.
- Sign the source-chain transaction. Face ID or Touch ID. The asset leaves the source chain.
- Watch the destination chain. Bridges typically settle in under a minute on fast chains and up to fifteen minutes on slower ones. JIL watches for you and notifies on arrival.
- Two-leg CREB. Your evidence bundle records both legs and the time between them. Useful for accounting and tax records.
Which chains can I bridge to?
At launch: Ethereum, Base, Arbitrum, Optimism, and Polygon. More chains are added as the bridge infrastructure matures. The chain picker will always show the current list.
Bridges take time
Bridges are not instant. Source-chain confirmation needs to finalize before the destination chain releases your asset. This is by design - it is what makes bridges safe. If you need fast access to the destination chain, plan ahead.
Common questions
What is the difference between bridging and wrapping?
Bridging moves the same asset across chains (USDC on Ethereum becomes USDC on Base). Wrapping turns an asset into a different version of itself for use inside JIL (BTC becomes wBTC-JIL). They solve different problems.
What if the bridge is delayed beyond the estimate?
The two-leg CREB lets us see exactly where the transit stalled. Contact support with your CREB ID and we will investigate. Funds are not lost - they are in flight.
Can I bridge from an exchange directly to JIL on another chain?
No, that is two separate steps. First, withdraw from the exchange to your JIL wallet on the chain the exchange supports. Then bridge within JIL to your destination chain.
Article 7 · Inside JIL
Wrapping BTC, ETH, or USDC into JIL-network versions
Wrapping turns a regular asset into a JIL-network version of itself, one-for-one. We do this because some JIL features only work with JIL-network assets. You can unwrap any time and get the original back, also one-for-one.
One-for-one, always
Every wBTC-JIL in circulation is backed by exactly one BTC in reserve. Same for wETH-JIL and wUSDC-JIL. The reserve is provable on-chain. We do not fractionalize.
What you will do
- Tap Wrap on the home screen. Or open the asset detail for BTC, ETH, or USDC and choose Use Inside JIL.
- Pick what to wrap. Today JIL supports BTC to wBTC-JIL, ETH to wETH-JIL, and USDC to wUSDC-JIL. More wraps are added over time.
- Enter the amount. The wallet shows what you will receive (the same amount in wrapped form) and the network fee.
- See the reserve proof (first wrap only). JIL shows you the reserve contract address and a live attestation that confirms the reserve is backed. You can verify this on-chain yourself any time.
- Safety checks run. JIL attests the wrap contract and the reserve before signing.
- Sign with biometric. Face ID or Touch ID.
- See your wrapped balance. The new wrapped asset appears in your wallet. The original is held 1:1 in the reserve.
What can I do with a wrapped asset?
Wrapped assets unlock JIL-network features that the original chain assets cannot do:
- Pay JIL-network transaction fees in wBTC-JIL or wETH-JIL instead of needing to hold the underlying
- Participate in JIL-network liquidity programs
- Use JIL's Secure Document Vault tied to your on-chain wallet identity
- Bridge to other JIL-supported chains while preserving your original asset peg
How do I unwrap?
Open the wrapped asset's detail screen and tap Unwrap. The process reverses one-for-one. The original is released from reserve and back to your wallet.
Common questions
Where does my real BTC go when I wrap?
It moves into a reserve contract that is publicly visible on the source chain. Every wBTC-JIL in existence is backed by one BTC sitting in that contract. The reserve is audited by an external attestor and the proof is on-chain.
What if JIL goes away - can I still unwrap?
Yes. The unwrap function is in the smart contract, not in JIL's servers. If JIL the company disappeared tomorrow, you could still call unwrap directly on the contract from any Ethereum tool. The contract is the agreement, not us.
Is wrapping the same as staking?
No. Staking locks your asset to earn yield, typically with risk of loss. Wrapping converts your asset one-for-one with no yield and no loss exposure. They are different products.
Why doesn't JIL just use regular wBTC?
Most wrapped tokens have third-party custodians and have suffered de-pegging events. JIL's wrapped versions use on-chain provable reserves with no custodial intermediary. The trade-off is they only work inside JIL.
Article 8 · Inside JIL
Swapping one token for another on the DEX
A swap is trading one token for another at the current market price. JIL routes your swap across the best available exchange (Uniswap, 1inch, or 0x) to give you the most favorable rate, then runs safety checks before signing.
Swap fees by tier
Tier 0: 2.00% · Tier 1: 1.50% · Tier 2: 1.00% · Tier 3: 0.50%. Your current rate is shown in the swap screen. Upgrade options appear if a better rate would save you money on this trade.
What you will do
- Tap Swap on the home screen. Or open any asset and choose Swap from its detail menu.
- Pick from and to. Choose what you have and what you want. The wallet shows the estimated amount you will receive based on current rates.
- Enter the amount. JIL shows the route (which exchange the trade will execute on), the swap fee, and the slippage tolerance.
- Approve the token (first time only). The first time you swap a particular token, the network needs your permission to read its balance. This is standard. You only see it once per token.
- Review safety check results. JIL attests the route, the destination token contract, and the slippage exposure. Red on any of these and the trade is blocked.
- Sign with biometric. Face ID or Touch ID.
- Watch the swap confirm. Most swaps execute within one minute.
- See your new balance. The receipt is in History.
What is slippage?
Token prices move every block. Slippage is the difference between the price you saw when you started the swap and the price when the swap actually executed. JIL's default tolerance is 0.5%, which is conservative. For volatile tokens you may need to raise it manually under Advanced.
Avoid honeypots
Some scam tokens let you buy but block you from selling. JIL's destination-token attestation catches the most common patterns, but if you are trading a brand-new token with no track record, do your own research first.
Common questions
Why does JIL charge a swap fee on top of the DEX cost?
The DEX (Uniswap, 1inch, 0x) takes its own routing fee. JIL's fee covers the safety checks, the route optimization, and platform development. Lower tiers pay more because higher tiers commit more to the platform. You can see exactly what you are paying before signing.
What if a swap fails partway through?
The whole transaction reverts on-chain. You lose only the network fee. Your tokens stay where they were. JIL retries with adjusted parameters and you re-confirm.
Why was my expected amount different from what I received?
Slippage. Between when you signed and when the network confirmed, the price moved. The slippage tolerance is a safety bound - if the move was worse than your tolerance, the trade reverts entirely.
Can I limit-order on the DEX?
Not in v1. Standard market swaps only. Limit orders are on the roadmap.
Article 9 · Getting Started
Setting up your wallet security
A protected wallet is only as secure as the locks you put on it - plus the platform shard that binds identity to the asset. JIL offers four user layers. Use at least three. The setup takes about ten minutes.
The four locks
Biometric (Face ID or Touch ID) · Authenticator app (TOTP) · Passkey · Recovery file. The first two are everyday locks. The passkey is for new-device sign-in. The recovery file is your absolute last resort.
What you will do
- Open Settings → Security. You will see your current security score and what is enabled. Anything above 80 is solid.
- Add biometric unlock. Tap Enable and complete the system prompt. Face ID or Touch ID becomes your one-tap daily unlock. Your face and fingerprint never leave your device.
- Add an authenticator app (TOTP). Open Google Authenticator, Authy, or 1Password. Scan the JIL QR code. Enter the six-digit code it gives you. Done.
- Add a passkey. A passkey is a passwordless sign-in tied to your device. It replaces passwords entirely and cannot be phished. Tap Add Passkey and follow the system prompt.
- Generate backup codes. Eight one-time codes. Use them if you lose your authenticator app. Save them in your password manager or print them.
- SMS - skip this if you can. SMS is vulnerable to SIM-swap attacks where someone takes over your phone number. We allow SMS only as a last-resort fallback. Do not use it as your primary second factor.
SIM swap is real
SIM-swap fraud has stolen millions of dollars from crypto users in the last three years. If your second factor is SMS, an attacker only needs to convince your phone carrier to port your number. Use TOTP and a passkey instead. SMS only as last resort.
What each lock does
- Biometric - daily unlock and transaction signing on this device. Fastest. Tied to this device only.
- TOTP - second factor for sign-in on a new device. Six-digit code from an authenticator app, changes every 30 seconds.
- Passkey - passwordless sign-in tied to a device. Can be synced via Apple, Google, or Microsoft if you use their cloud passkey sync.
- Recovery file - restores your entire wallet on a new device if you lose access to everything else. Save it well, never lose it.
- Backup codes - eight one-time codes that substitute for TOTP. Use one if you lose your authenticator app.
If you lose access
The recovery path depends on what you lost:
- Lost your phone, kept your sign-in account - sign in on the new device, re-enroll biometric and TOTP, you are back.
- Lost your phone and your authenticator app - use a backup code on new device sign-in, then re-enroll.
- Lost your phone, your authenticator, and your sign-in account - restore from your recovery file. This is exactly what it exists for.
- Lost everything - without any of the above, no recovery is possible. Death and recovery are wallet policy; JIL does not take control of assets to reset them.
Common questions
What is the minimum security I need?
At minimum: biometric + TOTP + recovery file saved somewhere safe. That puts you above a 70 security score and protects against the great majority of attacks.
Do I need a passkey if I already have TOTP?
Strongly recommended. Passkeys cannot be phished. TOTP can be - a fake JIL site can prompt you for your TOTP and replay it within 30 seconds. A passkey is bound to the real JIL domain and cannot be reused on a fake site.
Why can't JIL just reset my password if I lose everything?
Because there is no password that moves the asset by itself. You authorize every sign. JIL retains one shard so identity and policy still bind to the key. That is not an exchange reset, and it is not “only you hold keys.”
Can I use the same TOTP code on multiple devices?
Yes - if your authenticator app supports multi-device sync (Authy and 1Password do; Google Authenticator does with cloud sync). Keep at least two devices with your TOTP set up so you are not locked out by losing one phone.
Lock down your wallet now
Setting up the four layers takes about ten minutes. Worth it before you hold meaningful balances.
Open Security Settings →