Self-custodial Qubic desktop wallet
Windows · macOS (Universal) · Linux (AppImage · .deb · .rpm)
Keys stay encrypted on disk. Signing material lives only in Rust process memory and is wiped immediately on lock. No Glyph backend, no key escrow, no browser extension surface.
Wallet
- Send, receive, burn, stake
- Send Many — up to 25 transfers in a single session with CSV/JSON import
- Full transaction history with memos and fiat price snapshots
- Vault analytics — net flow, top counterparties, monthly summaries
- Global search across accounts, contacts, tx hashes, and memos
Security
- AES-256-GCM encrypted vaults with Argon2 KDF
- Auto-lock on idle, sleep, or window blur
- Clipboard auto-clear; immediate wipe on lock
- Biometric unlock — Windows Hello, macOS Touch ID, Linux secret store
- Local audit log of every signing event
- Signed update payload verification
dApp integration
- Native
glyph://deep-link protocol - Request types:
transfer,sc_call,sign_message,verify_message,connect - Replay protection via nonce store (1-hour window)
- Result delivery via server callback POST or browser redirect
- Request history with per-entry callback status
Desktop
- System tray with hide-to-tray
- Desktop notifications with inbox, per-type filters, and price/balance alerts
- Multiple vaults with color coding, watch-only support
- Themes, font pairs, accent colors
Design
- Comprehensive design system (
DESIGN.md) — colors, typography, spacing, components - Sheet-based dialogs throughout (bottom-slide pattern)
- Geist font family (sans, display, mono)
- Phantom-inspired dark UI with floating navigation
- Bottom nav auto-hides when sheets are open
Vault data is encrypted before hitting disk. Unlocked keys never leave the Rust process.
flowchart LR
seed([Seed / private key]) -->|AES-256-GCM · Argon2| vault[(Encrypted vault on disk)]
vault -->|Password unlock| session[/Volatile session keys/]
session -->|Lock event| wiped([Cleared from memory])
Sensitive operations are isolated to the Rust layer — the renderer only sends signing requests and receives back signed transactions.
| Operation | Layer |
|---|---|
| Vault encryption / decryption | Rust (aes-gcm) |
| Deep-link URL validation | Rust |
| Nonce replay protection | Rust |
| Callback HTTP posting | Rust (reqwest) |
| Auto-lock timer | Rust (background thread) |
| Clipboard clear | Rust |
| Update payload verification | Rust |
dApps send requests by opening a glyph://v1/request?d=<base64url-envelope> URL. Glyph validates, queues, and presents a review screen. Results are delivered to the dApp via callback POST or redirect URL.
sequenceDiagram
participant dApp
participant Rust as Rust layer
participant React as Renderer
participant User
dApp->>Rust: open glyph://v1/request?d=<payload>
Rust->>Rust: validate URL · check nonce · store payload
Rust->>React: emit glyph:request event
React->>User: request review UI
User->>React: approve / reject
React->>Rust: post_callback(url, body)
Rust->>dApp: HTTP POST result JSON
Use @glyph-ecosystem/connect to build envelopes and handle result delivery from any framework.
Requirements: Rust stable · Bun · Tauri v2 prerequisites
git clone https://github.com/glyph-ecosystem/wallet
cd glyph.app
bun install
bun tauri dev # dev server
bun tauri build # production bundle → src-tauri/target/release/bundle/Checks:
bun run typecheck
bun run test
cargo check --manifest-path src-tauri/Cargo.toml| Layer | Choice |
|---|---|
| Desktop shell | Tauri v2 |
| Frontend | React 19 + TypeScript |
| State | Zustand v5 + TanStack Query v5 |
| Animations | Motion |
| Design system | See DESIGN.md |
| Native | Rust |
| Crypto | aes-gcm (Rust) |
| Qubic SDK | @qubic-lib/{crypto,tx,rpc,contracts} |
| Platform | Update path |
|---|---|
| Windows | NSIS built-in updater |
| macOS | App built-in updater |
| Linux AppImage | Built-in updater |
| Linux deb / rpm | System package manager |
- Discord: https://discord.gg/s5qNRNGu96
- GitHub: https://github.com/glyph-ecosystem/wallet
- Website: https://wallet.glyphq.org
Source-available. See repository for current terms.