Terms of Use
Last updated: August 2026
Acceptance
By using W2QR, you agree to these terms. If you do not agree, do not use the application. See also our Privacy Policy.
Description of service
W2QR is a client-side application that encrypts BIP-39 seed phrases into QR codes using honey encryption.
- Password encryption — QR + password. All encryption runs in-browser. Every password produces a valid mnemonic (honey encryption).
- W2QR Card — A pre-printed physical or digital card with a QR code that becomes a wallet when activated with a password.
W2QR also provides a built-in wallet for viewing addresses, checking balances, and managing assets — no external wallet software is required. Optionally, W2QR can act as an external signer for MetaMask (via the W2QR Connect Snap) or other wallets (via the W2QR Remote Signer extension).
W2QR does not hold funds or manage blockchain state. It derives temporary signing keys from your encrypted QR backup during time-limited sessions.
User responsibilities
You are solely responsible for:
- Choosing a strong password and remembering it
- Safely storing your encrypted QR code or payload file
- Verifying the derived address matches your expected wallet
- Managing signing session timeouts appropriately
- Reviewing and approving all transactions before signing
- Ensuring your browser environment is secure and free from malware
Non-custodial disclaimer
W2QR is non-custodial. We have no access to your seed phrase, password, private keys, signing keys, or funds. We cannot recover lost passwords or QR backups. We cannot reverse, modify, or cancel any blockchain transaction.
W2QR Cards create wallets through honey encryption. W2QR cannot determine which wallet a card will produce without the user’s password.
Data handling
W2QR never receives, transmits, or stores your password, seed phrase (mnemonic), or private keys. All cryptographic operations — encryption, decryption, key derivation, and transaction signing — run entirely in your browser.
The server may store KEK-encrypted ciphertext for optional features like Google Drive backup, linked to a hashed identifier — not to your Google email, wallet address, or any personal data. This encrypted data cannot be used to access your wallet without your password.
Plastic card activation
A pre-printed plastic card contains a honey-encrypted QR code. When activated with a password, honey encryption derives a unique BIP-39 mnemonic. The card's QR is your wallet backup — scan it and enter your password to access your wallet.
Permanent loss disclaimer
If you lose all of the following simultaneously, your wallet is permanently unrecoverable and your funds will be lost:
- Your password
- Your encrypted QR code or backup
W2QR cannot recover your wallet under any circumstances. There is no "reset password via email" or account recovery process. This is by design — it is what makes W2QR non-custodial and secure.
Limitation of liability
W2QR is provided "as is" without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose, and non-infringement. We are not liable for any loss of funds, data, or access resulting from forgotten passwords, lost QR backups, lost device access, software bugs, compromised browsers, or any other cause.
Open source
W2QR and the W2QR Connect Snap are open source. The source code is available for review at github.com/alexvirtech/w2qr and github.com/alexvirtech/w2qr-mm.
Changes to these terms
We may update these terms from time to time. The updated version will be posted on this page with a revised date. Continued use of W2QR after changes constitutes acceptance of the new terms.
Contact
For questions about these terms, contact alex@vir-tec.net.