Non-custodial wallet
Wallet where the private key and seed phrase are stored only by the user, never by the service provider. Transactions are signed locally on the device, and the app developer has no ability to access funds.
Aliases: self-custody wallet, non-custodial
Non-custodial wallet is an app or device in which the private key is generated and held by the user. The wallet itself is just an interface to the TON network: the developer cannot withdraw funds, freeze an account, or hand it over to third parties.
How it works
On first launch the app generates a 24-word seed phrase. The private key and the wallet address are then derived locally on the phone or in the browser. The seed is shown to the user once for backup; provider servers never see or receive it.
Every outgoing transaction is signed locally: the device takes the private key, produces a signature, and broadcasts the signed message to the TON network through an RPC node. The node itself never stores keys — it merely relays already-signed messages.
The wallet talks directly to a wallet-contract on chain (v3R2, v4R2, w5). Balance, history, and state are public on-chain data, not a row in the provider’s database.
Examples on TON
- Tonkeeper — flagship non-custodial wallet of the ecosystem; iOS, Android, Chrome extension.
- MyTonWallet — browser extension and mobile app, focused on extensibility.
- Tonhub — wallet by Whales Corp, historically popular with stakers.
- OpenMask, DeWallet, Bitget Wallet, OKX Wallet, Trust Wallet — multichain wallets that support TON in non-custodial mode.
Wallet inside Telegram defaults to a custodial setup, but it ships a switch to TON Space — a non-custodial module within the same UI.
Advantages
- Full control. No one can freeze or confiscate funds without access to the seed.
- Native DeFi. Connecting to dApps via TON Connect, staking, DEX trading, NFT marketplaces all happen directly from the wallet.
- Portability. The seed phrase moves between apps. If Tonkeeper stopped existing tomorrow, funds could be recovered in any other compatible wallet.
- Transparency. Every operation is visible on explorers such as Tonscan and Tonviewer.
Drawbacks and risks
- Full responsibility for the seed. Lose the phrase, lose the funds. There is no support team that can recover access.
- Phishing and social engineering. Fake sites, drainer dApps abusing TON Connect, bogus airdrops — all of these target non-custodial users specifically.
- User error. Send TON to the wrong address and the transaction is final.
- Steeper learning curve. Users need to understand fees, address formats (UQ, EQ), bounce flags, and exchange-safe deposits.
When to choose non-custodial
If you plan to hold a meaningful balance, use DeFi actively, own NFTs, or play mini-apps with real-money economies, a non-custodial wallet is effectively mandatory. The convenience of custodial options like Wallet in Telegram is outweighed by concentration risk at a single provider and the ever-present possibility of KYC-driven freezes.
Small balances earmarked for in-Telegram purchases can live in a custodial wallet without much worry. As soon as the balance becomes meaningful, migration to self-custody is the standard recommendation.