Wallet Export

Learn how GotSOL's Wallet Export feature, powered by Privy, lets merchants self-custody their private keys securely.

not your keys, not your wallet

The Export Wallet feature is powered by Privy, a secure wallet infrastructure provider specializing in embedded wallets for Web3 applications. This feature allows users to export their private key from their GotSOL embedded wallet, enabling them to regain full self-custody and import it into external wallets like Solflare or Backpack.

The export option serves as an "escape hatch," ensuring users are not locked into the POS and can move their assets freely.

Solana-Specific: For Solana wallets, the export provides the full private key, compatible with wallets like Solflare or Backpack.

What is the Privy Export Feature?

• Embedded Wallets in GotSOL: When users sign up via email, phone, social login (e.g., X/Twitter), or even external wallets, GotSOLpay creates an embedded Solana wallet behind the scenes using Privy's key management. This wallet supports gasless transactions, fiat onramps, and multi-chain transfers without requiring users to handle complex seed phrases upfront.

• Export Functionality: The export feature reveals the full private key (for Solana) or seed phrase, which users can copy and import elsewhere. This is accessible via the app's wallet settings (e.g., under "Export Wallet" in the menu).

Security Considerations

Privy and GotSOL prioritize security to mitigate risks associated with key exposure. Here's how it's secured:

Core Security Mechanisms

• Key Splitting (Shamir's Secret Sharing): Privy shards the private key across secure enclaves (e.g., Trusted Execution Environments or TEEs). No single party, user, app, or Privy, holds the full key until export.

• Secure Assembly: During export, keys are reconstructed client-side on a isolated origin (e.g., a Privy-hosted iframe). Neither GotSOL nor Privy servers can access the assembled key/phrase.

• Browser/App Protections: Export is restricted to secure environments (HTTPS, no iframe vulnerabilities). Mobile apps use native secure storage.

• No Server Logging: Exports are not logged or transmitted to servers, ensuring zero-knowledge privacy.

• Warnings and UX Safeguards: Bold warnings, copy-only interfaces, and no "share" buttons prevent accidental leaks.

Audit Status: Privy undergoes regular third-party audits (e.g., by Trail of Bits). GotSOL inherits these via integration.

Recovery: No built-in recovery. lost keys mean lost funds. Users should back up exports in secure managers like 1Password (encrypted, offline).