True BIP-39 & SLIP-0010 Ed25519 Derivation
Standard 12- and 24-word mnemonics derived at m/44'/784'/{account}'/0'/0' with Blake2b-256 (0x00 || pubkey) address hashing and suiprivkey Bech32 encoding.
BIP-39SLIP-0010Blake2b-256Bech32
NATIVE iOS 17+ • 100% NON-CUSTODIAL • ZERO SWAPSsuiflare —
suiflare —
Wallet for SUI.
Engineered in pure SwiftUI. Your 12-word recovery phrase is encrypted with AES-GCM inside the iOS Keychain. Sign Programmable Transaction Blocks locally on your iPhone and broadcast directly to Mainnet, Testnet, or Devnet.
- m/44'/784'/0'/0'/0'
- SLIP-0010 Ed25519
- AES-GCM + HKDF
- iOS Keychain Vault
- 0 Trackers
- No Analytics SDKs
9:41
Interactive demo · simulated balances · no real keys or transactions · 1,000,000,000 MIST = 1 SUI
SUI ECOSYSTEM · LIVE MARKET
Loading prices…
SUI Sui
$0.8890 +3.42%
MCap $3.66B
Vol $541.27M
US
USDC USD Coin
$0.9997 -0.02%
MCap $71.63B
Vol $22.03B
DE
DEEP DeepBook
$0.0157 -0.42%
MCap $39.32M
Vol $4.19M
WA
WAL Walrus
$0.0304 -2.95%
MCap $79.44M
Vol $4.49M
CE
CETUS Cetus
$0.0206 -1.38%
MCap $19.91M
Vol $40.76M
NA
NAVX NAVI Protocol
$0.00913 +0.40%
MCap $7.45M
Vol $215.1K
ARCHITECTURE
From your thumb to the chain. Nothing in between.
suiflare has no servers and no accounts. Every transfer follows the same four local steps.
- 01
Unseal on device
Passcode or Face ID releases the AES-GCM vault from the iOS Keychain. Keys never leave memory on your iPhone.
HKDF<SHA256>(passcode, salt₁₆) - 02
Build the PTB
suiflare selects and merges Coin<0x2::sui::SUI> objects to cover amount + gas, then BCS-serializes the transaction.
MergeCoins → SplitCoins → TransferObjects - 03
Sign locally
An Ed25519 intent signature is produced on your iPhone. Only signed bytes are ever sent anywhere.
Ed25519(Blake2b(intent || tx_bytes)) - 04
Broadcast direct
Signed bytes go straight to the Sui GraphQL full node you selected — no relay, no backend, no middleman.
graphql.mainnet.sui.io/graphql
The only hosts the app ever talks to:
- Mainnetgraphql.mainnet.sui.io
- Testnetgraphql.testnet.sui.io
- Devnetgraphql.devnet.sui.io
- Pricesapi.coingecko.com
SECURITY
Real cryptography. Not a marketing slide.
The engineering inside suiflare, exactly as it ships.
AES-GCM + HKDF-SHA256 Keychain Vault
Passcode-derived encryption key (HKDF<SHA256>, 16-byte random salt) sealed in the iOS Keychain with kSecAttrAccessibleWhenUnlockedThisDeviceOnly and optional Face ID (SecAccessControl .biometryCurrentSet).
AES-GCMHKDFThisDeviceOnly
Passcode / Face ID Gate on Every Sensitive Action
Revealing the recovery phrase, enabling Face ID, and approving a SUI transfer all require live cryptographic verification against the Keychain vault.
Reveal phraseEnable Face IDApprove send
Multi-Coin PTB Gas Merging & BCS Serialization
Automatically selects and merges multiple Coin<0x2::sui::SUI> objects to cover transfer amounts plus the epoch's reference gas budget, encoding object digests as canonical BCS byte vectors (0x20 + 32 bytes) via Sui GraphQL RPC.
PTBBCSGraphQL
Strictly No Swap, No Custodial Accounts, Zero Telemetry
Pure hold, send, receive, and on-chain inspection. No third-party analytics SDKs, no ad identifiers, and no clipboard snooping.
0 SDKs0 IDFA0 servers
FAQ
Questions, answered plainly.
Still stuck? Visit Support for step-by-step guides and a contact form.