TON Space: Self-Custody Wallet Built Into Telegram

TON Space is a self-custody mode inside the Wallet bot in Telegram, launched by The Open Platform in 2024. It lives in the same surface as the custodial Wallet, but operates on a fundamentally different model: a 24-word seed phrase is generated on the user’s device, private keys never leave local storage, and no support team can recover access if they are lost.

It is a compromise between Telegram-native UX convenience and the “not your keys, not your coins” principle. This article covers the mechanics of TON Space, how it differs from Tonkeeper and MyTonWallet, regional limitations, and a baseline security checklist.

What TON Space is and is not

TON Space is a mode, not a separate app. After opening the Wallet bot, a user can choose between two entities:

• Wallet (custodial mode) — custodial wallet. The Open Platform holds keys, support can recover access via Telegram phone number, KYC applies above limits.
• TON Space (self-custody mode) — the mode described here. The seed phrase is shown once at creation, after which the standard non-custodial flow applies.

Inside Telegram both modes look similar — same balance, history, send/receive. The difference is who owns the keys and who bears responsibility for their safekeeping.

Mechanics: what happens when you create TON Space

When TON Space is activated in the Wallet bot, the following occurs:

1. The Telegram client locally generates 256 bits of entropy using the device’s system CSPRNG.
2. The entropy is converted into a 24-word mnemonic (BIP39-compatible wordlist).
3. From the mnemonic, the private key for a wallet contract is derived (v4R2 as of May 2026, the standard for TON Space).
4. The contract is deployed on the first outgoing transaction (the classic TON lazy-deployment model).
5. The seed phrase is shown to the user once, with mandatory verification by entering several random words.

After this, the private key is stored only in the device’s secure enclave (Keychain on iOS, EncryptedSharedPreferences on Android). The Open Platform does not see it — verifiable by the fact that reinstalling Telegram without a backup makes recovery impossible.

TON Space vs Tonkeeper: key differences

The main functional difference is the absence of Ledger and a thinner multi-account experience. The main operational difference is that the UX lives entirely inside Telegram, with no separate app to install.

When TON Space is the right choice

TON Space fits a specific user profile:

1. Already lives mostly in Telegram. If your main flow is paying for gifts, buying in Mini Apps, P2P transfers inside chats, leaving for a separate wallet adds friction.
2. Does not hold large balances. A hot wallet on a phone inside Telegram is the “operational funds” scenario, not the “capital vault” scenario. For $10k+ use cold storage or Ledger.
3. Understands that a lost seed is gone forever. If the phrase is lost, no support team can help. This is the price of real self-custody.
4. Wants minimum attack surface outside Telegram. Fewer installed apps means fewer vectors for device compromise.

For active DeFi users, NFT collectors with large portfolios, and anyone who needs Ledger — Tonkeeper remains a more universal choice.

When TON Space is the wrong choice

Several scenarios where the mode is better skipped:

• Balance larger than you are comfortable losing. Any hot wallet, even self-custody, is not the place for serious savings.
• You need a Ledger or other hardware wallet. TON Space does not support them as of May 2026.
• You need a multisig for a team or DAO. Use dedicated multisig solutions on top of Tonkeeper and third-party multisig contracts.
• Region not supported. TON Space availability is controlled by The Open Platform and varies by jurisdiction. If the mode is hidden, that is policy, not a glitch.

Regional limits: what to know

TON Space availability depends on a region inferred from a combination of signals (Telegram language, phone number, sometimes geolocation). The list of supported regions is not openly published and can change without notice.

Practical implications:

• The same user can “lose” TON Space after switching to a SIM from another jurisdiction.
• VPN does not always help — detection draws on multiple signals.
• In edge cases (Russia, Belarus, Iran, several others) the feature may appear and disappear across app updates.

For users in regions with unstable availability the sensible plan is a backup self-custody wallet (Tonkeeper, MyTonWallet, Tonhub) with its own seed phrase. The TON Space seed can be imported into any compatible client if needed.

TON Connect: dApp compatibility

TON Space fully supports TON Connect 2.x — meaning connections to DEXes (STON.fi, DeDust, swap.coffee), NFT marketplaces (Getgems, Disintar), lending protocols (EVAA), and Mini Apps work the same as from Tonkeeper.

The UX is slightly different: the transaction confirmation opens directly inside Telegram with no app switch. This is faster, but creates a habit of “tap confirm without looking” — a critical security risk.

Security checklist for a TON Space user

If you decide to use TON Space, the minimum hygiene is:

1. Write 24 words on paper. Not a screenshot, not a Notes file, not cloud. Paper in a secure place, or a metal plate.
2. Verify the backup. Uninstall the Wallet bot, restore from seed, confirm access returns. Do this immediately after creation, while the balance is zero.
3. Telegram cloud password (2FA). Enable cloud password on the Telegram account itself. It does not protect the private key but protects the account from hijack.
4. Do not share Wallet screenshots. A screenshot can reveal an address that lets others attribute your on-chain activity.
5. TON Connect only on trusted domains. Read what you sign before confirming. Especially the transfer text, the amount, and the recipient address.
6. Do not connect TON Space to unknown Mini Apps. Drainer flows work here too: you sign an innocuous-looking transaction that actually drains TON or expensive NFTs.
7. Limit to one device. Do not import the seed into ten clients “just in case” — each additional client is additional attack surface.

What is improving and what remains open

Since the 2024 launch the mode has evolved toward tighter integration with Telegram payments and a smoother first-time UX for users new to self-custody. Open items as of May 2026 include:

• Full Wallet v5 support with extended capabilities (gasless signing by default).
• Hardware wallet support (Ledger, Keystone) — not implemented at the time of writing.
• Transparent rules for regional access.
• Clearer signing prompts at TON Connect requests.

How far the product develops depends on the balance between convenience for the average Telegram user and the needs of experienced DeFi users.

Conclusion

TON Space is an attempt to make self-custody mainstream inside Telegram. For most users whose crypto activity revolves around gifts, Stars, and Mini Apps, it is more convenient than maintaining a second wallet. For large positions, for DeFi farming in the tens of thousands, and for valuable NFT collections, dedicated clients with Ledger remain the better choice.

The key thing to remember: self-custody means responsibility. A paper backup of the 24 words, an understanding of TON Connect, and care when signing transactions are the mandatory baseline. With them TON Space is a strong tool; without them it is just a faster way to lose funds.