Is WATS Wallet safe? Security, custody and the company
WATS Wallet is a non-custodial, multi-product crypto wallet built by Alltoscan LLC (operating since 2019). Here is who makes it, how custody works across each product, what the NFC card does and does not do, and how to make sure you have the real app — stated plainly, with no inflated claims.
Is WATS Wallet safe and legit?
WATS Wallet is a real, non-custodial wallet from Alltoscan LLC, a company operating since 2019. You hold your own keys in every WATS product — the Chrome extension and the mobile app — and WATS never holds a key. We do not publish ratings, audits, insurance or user counts we cannot substantiate — this page sticks to verifiable facts so you can judge for yourself.
WATS at a glance
- Maker
- Alltoscan LLC
- Operating since
- 2019
- Custody — every product
- Pure self-custody — you hold your keys and seed phrase; WATS never holds a key
- NFC Metal Card
- Tap-to-authenticate companion paired to a single device — does not store keys, not cold storage
- Networks
- EVM chains, Solana and TON (no native Bitcoin)
- Official downloads
- Apple App Store, Google Play, Chrome Web Store
- Where keys live
- Generated, encrypted and stored on your device in the Chrome extension and the mobile app; they never leave it
How custody works across WATS
Every product: pure self-custody
In the WATS Chrome extension and mobile app you generate and hold your own keys and recovery phrase. No one — not even WATS — can move or freeze your funds, and recovery is your responsibility. This is the same self-custody model as any non-custodial wallet.
NFC Metal Card: one card, one device
Each WATS NFC Metal Card carries a unique ID. The first time you tap it to your phone in the WATS mobile app, the card pairs with that device — from then on it works only with that paired phone. A card alone is useless to whoever finds it, because it authenticates nothing without your device.
Authentication, not key storage
The WATS NFC Metal Card authenticates access to your wallet and enables tap-to-sign on mobile. It does not hold your private keys and is not a cold-storage device. It adds a physical factor to authentication — your keys live in the apps, not on the card.
Read the code
The WATS Wallet Chrome extension client is open source under the MIT license. Its code, including how keys are generated, encrypted, stored and unlocked on your device, is public on GitHub, with tagged releases since v1.7.0 (2 September 2026). The hosted backend, the ERC-4337 bundler proxy and the ATS paymaster service are not part of the repository.
How to verify you have the real WATS Wallet
Download only from official sources
Get the mobile app from the Apple App Store or Google Play, and the extension from the Chrome Web Store. Every official link is on the WATS download page.
Check the domain and publisher
Confirm the website is watswallet.com and the publisher is Alltoscan LLC / WATS Wallet before installing or connecting your wallet.
Never share your recovery phrase
No legitimate WATS product, support agent or website will ever ask for your seed phrase. Anyone who asks is trying to steal your funds.
Verify before you sign
Read every transaction and approval prompt. Check the address, the amount and the permission a signature grants before you confirm it.
Report a security issue
To report a vulnerability in the Chrome extension, use GitHub private vulnerability reporting on the repository (Security tab, then Report a vulnerability); its security policy commits to an initial response within 7 days. For any other product, email info@watswallet.com with the affected product, version and steps to reproduce. WATS will never ask for your recovery phrase or private keys, so never send them.
github.com/watswallet/wats-wallet-bnb-chain/securityinfo@watswallet.com
Official WATS Wallet channels
- Website
- watswallet.com
- WATS Store
- store.watswallet.com
- Chrome Web Store
- WATS Wallet, ID hcfdepjikbhjocfdopeabjmonpnijoei
- App Store
- WATS Wallet, app ID 6743999237
- Google Play
- com.wats.wallet
- Source code (Chrome extension)
- github.com/watswallet/wats-wallet-bnb-chain
- info@watswallet.com
Safety & trust FAQ
Is WATS Wallet non-custodial?
Yes — every WATS product is non-custodial. In the Chrome extension and the mobile app you hold your own keys and seed phrase, and WATS never holds a key or takes custody of your assets.
Who makes WATS Wallet?
WATS Wallet is built by Alltoscan LLC, a company operating since 2019. You can reach the team at info@watswallet.com. WATS is a multi-product wallet spanning a Chrome extension, mobile app and the NFC Metal Card.
Does the WATS NFC Metal Card store my private keys?
No. The NFC Metal Card is a tap-to-authenticate companion that authenticates access to your wallet and enables tap-to-sign on mobile. It does not store private keys and is not a cold-storage device; your keys live in the WATS apps.
How is the NFC card's pairing different from cold storage?
The WATS NFC Metal Card carries a unique ID and pairs with a single device in the WATS mobile app — it works only with that paired phone, as a physical tap-to-authenticate second factor. Cold storage keeps your keys offline on a device that signs transactions; the WATS card never stores keys, so it is an authentication layer, not key storage.
Where do I download the real WATS Wallet?
Only from official sources: the Apple App Store and Google Play for mobile, and the Chrome Web Store for the extension — all linked from the WATS download page. No legitimate WATS source will ever ask for your recovery phrase.
Is WATS Wallet open source?
The Chrome extension client is: its source code is public on GitHub under the MIT license (github.com/watswallet/wats-wallet-bnb-chain). The hosted backend, the ERC-4337 bundler proxy and the ATS paymaster service are not part of that repository.
What happens if I lose my phone?
Your funds stay on the blockchain. Install WATS Wallet on a new device from the official store and restore your wallet with your recovery phrase, entered in the original order. The NFC Metal Card cannot restore a wallet because it holds no keys, and without the recovery phrase nobody, including WATS, can restore access.
Why does the WATS Chrome extension need access to all websites?
So that dApps can find the wallet. The extension adds its wallet provider to each page as it loads (EIP-1193 and EIP-6963 for EVM networks, TON Connect for TON), which is why Chrome warns that it can read and change data on all websites. No site gets your address until you approve its connection request, every signature and transaction waits for your confirmation, and you can revoke any connected site in Settings. The Chrome extension page lists every permission and what it is used for.
Last updated: October 28, 2026