SPW Wallet

WHAT'S NEW IN 1.0.1 • Multi-wallet support: create or import additional wallets, switch from the header dropdown, rename or remove individual wallets — all gated by one master password. — SPW Wallet is a self-custody wallet for the SPW network, built as a Chrome extension. Everything happens inside the extension popup — there is no website to redirect to, no remote code, no dApp integration in this release. WHAT IT DOES • Create a new wallet — generates a 12-word BIP-39 recovery phrase locally, then encrypts your keys with a password using PBKDF2 (600,000 iterations) and AES-GCM. The encrypted vault is stored in chrome.storage.local; the password is never sent anywhere. • Manage multiple wallets — add additional wallets at any time (create-new or import-from-phrase), switch between them from the header dropdown, rename or remove individual wallets. All wallets share a single master password. • Import an existing wallet from a 12 or 24-word BIP-39 phrase. • Show your address with a QR code for receiving SPW. • Show your current balance, queried from the SPW node REST API. • Send SPW to any address, with optional 80-byte memo. The transaction is signed locally with secp256k1 and broadcast to the SPW node's /tx/broadcast endpoint. • Browse your transaction history. • Reveal your recovery phrase (password-gated, with auto-clearing clipboard). • 15-minute idle auto-lock; locks immediately on browser close. WHAT IT DOES NOT DO • It does not collect, transmit, or analyze any user data. • It does not load any remote code — all JavaScript executes from the bundle inside this extension. • It does not inject scripts into web pages and does not interact with dApps in this release. (dApp integration may come in a future version, with explicit user approval flows.) • It does not support tokens other than SPW. • It does not require an account, sign-up, or any external service. PRIVACY • Zero data collection. The only network traffic is between this extension and the SPW node REST API at https://spw.network/api, used to fetch your balance, list transactions, and broadcast signed transactions. • Full privacy policy: https://spw.network/privacy TECHNICAL • Manifest V3. Chromium-based browsers, Chrome 102+. • All cryptography runs in-browser using @noble/secp256k1 (signing), @noble/hashes (sha-256, ripemd-160, hmac, sha-512), @scure/bip39 (mnemonic), and qrcode (the receive-screen QR code). These libraries are bundled into the extension; no remote loading. • Encryption: PBKDF2-SHA256 (600k iterations) → AES-256-GCM, via the browser's built-in SubtleCrypto. • Source code: https://github.com/otisaipro/spw-wallet