Tonkeeper full review 2026: features, security, weak spots

Tonkeeper is the best-known non-custodial wallet on TON. Per TON Foundation data at the end of 2025 it processed more unique transactions than any other wallet on the network, except the in-Telegram Wallet. In this review — what is inside in 2026, where Tonkeeper is strong, and where it has real weak spots.

TL;DR — who it fits

• Active TON user — DeFi, mini-apps, NFTs, transfers — Tonkeeper covers 95% of scenarios.
• Long-term storage — Tonkeeper plus Ledger, or Tonkeeper Signer mode.
• Team / corporate wallet — better as a multi-sig signer than “one phone with a million TON”.
• Beginner not yet committed — install is fine, but it makes sense to first try the in-Telegram Wallet on $20–50 to minimise friction.

What Tonkeeper is

Tonkeeper is a family of apps from a team of former TON Labs engineers. Available builds:

• iOS — App Store, active release cadence (every 2–4 weeks);
• Android — Google Play and a direct APK from tonkeeper.com;
• Web (Tonkeeper Web) — web build with TON Connect and Ledger;
• Tonkeeper Pro — desktop app for macOS/Windows/Linux;
• Chrome extension — for browser DeFi.

The extension and web build are open source, the mobile clients are partially closed (the cryptography and signing layer is open). That is the typical “open core” architecture — the sensitive crypto is auditable, the marketing UX is not.

Key features in 2026

TON Connect 2.0

The protocol that links the wallet to dApps, the analogue of WalletConnect on Ethereum. Per TON Foundation, more than 30 wallets and hundreds of apps support it. Tonkeeper is the reference implementation — if an app supports TON Connect, it almost certainly works with Tonkeeper.

Scenario: open STON.fi or DeDust, click “Connect Wallet”, scan a QR in Tonkeeper — the dApp can request signatures from you. Each transaction is a separate confirmation, no “approve all” by default.

Ledger support

Direct integration with Ledger Nano S Plus and Nano X via the TON app in Ledger Live. Tonkeeper becomes the interface, signing happens on the device. This is the minimum sensible defence for serious amounts — phishing via QR or a fake dApp will not steal funds in this setup, because Ledger displays the recipient and amount physically.

Detailed walkthrough — How to connect Ledger to a TON wallet.

Signer mode

A TON-specific feature: Tonkeeper on one phone works as a hardware wallet for another device. You sit at a laptop with Tonkeeper Web, hit “sign transaction” — Tonkeeper on the phone shows a pending transaction, you confirm with biometrics. This is a cheap Ledger alternative if you keep the phone reasonably isolated.

Multi-account

Up to ten wallets with different seed phrases inside one app. Useful for separating “hot DeFi”, “cold savings” and “corporate”. Each account can be hidden behind its own password or Face ID.

Address versions

Tonkeeper defaults to W5 — the fifth wallet contract version (released in 2024). It supports gasless USDT transfers and batch operations. When importing an old seed you can pick V3R2 / V4R2 / W5; all versions appear in one UI, balances on every non-zero version are listed separately.

Built-in swap and on-ramp

• Buy TON — via MoonPay, Mercuryo and Neocrypto. Provider fee 3–5%, EU and UK cards work, others are region-dependent.
• Token swap — via the STON.fi and DeDust APIs. For a power DeFi user the DEX websites are nicer, but for quick TON to jUSDT swaps the built-in flow is enough.

NFT and Telegram usernames

Full TON NFT standard support — collections show with previews, you can send, list on Getgems or Fragment. Telegram usernames and anonymous numbers appear in a separate section.

Security: under the hood

Tonkeeper builds its threat model on three layers.

1. Local keys. Seed is generated via the system CSPRNG, encrypted with AES-256 keyed by the PIN, stored in the OS secure enclave (Keychain on iOS, Android Keystore). Decryption only happens on-device.
2. Biometrics. Face ID / Touch ID do not replace the PIN — they are a second factor unlocking the already encrypted store. After a biometric reset the PIN is required.
3. Phishing protection. TON Connect prompts show the domain and icon — a fake site with a similar name is visible. Transaction signing displays a simulation result — you see that you would lose 100 TON and gain 0 jUSDT before signing.

What Tonkeeper does not do (and that matters):

• No server backups. Lose the seed, lose the account.
• No counterparty address screening. It is not an AML service.
• It cannot save you from social engineering. If you typed your seed into a phishing site, the funds will leave.

Weak spots

Plainly and without marketing varnish — where Tonkeeper loses or raises questions.

Closed mobile code

Part of the mobile client is closed. For most users this is fine (trust in the dev team), but if you are the “compile it yourself” kind of paranoid, look at MyTonWallet — it is fully open source.

dApp ad pressure

Mobile Tonkeeper periodically shows partner dApp banners on the home screen. They can be hidden but are active by default. This is typical paid discovery in crypto wallets, but some users find the UI cluttered.

Newcomer friction

Tonkeeper is a powerful tool, and its UX sometimes leans toward “feature over simplicity”. For example, picking the wallet contract version (W5/V4R2/V3R2) on import can confuse — most need the default, but the picker is visible. For total beginners the in-Telegram Wallet is simpler.

TON-only

If you need one wallet for TON, Ethereum, Solana and BTC, Tonkeeper does not fit. It is a specialised TON app. MyTonWallet, conversely, has been moving multi-chain (8+ networks as of 2026).

Tonkeeper vs alternatives

Quickly — who wants what.

Full comparison — best TON wallets guide.

Practical setup

A minimum safe setup for a private user:

1. Install Tonkeeper from the official store.
2. Create a new wallet, write the seed on paper (no cloud, no screenshot).
3. Enable biometrics plus PIN.
4. If the balance is more than a couple thousand dollars — add Ledger.
5. Do a test transfer of $1 to every new counterparty.

Bottom line

Tonkeeper in 2026 is best-in-class non-custodial wallet for TON. Mature, supports Ledger and TON Connect 2.0, has thoughtful features like Signer mode. Downsides — partly closed code and dApp ad pressure, but for most users that is not critical.

If you want fully open source — read the MyTonWallet vs Tonkeeper comparison. If you need maximum security — add a hardware wallet via the Ledger guide.

Sources

• tonkeeper.com — official site.
• TON Connect overview — protocol docs.
• docs.ton.org — wallet contract version specs (V3R2/V4R2/W5).