Turn on Advanced mode for explicit vault policies, signing exchanges, fee controls and replacement, and peer controls.
Your wallet connects directly to the Bitcoin network. Your private keys stay on your phone unless you choose to export them.
Combine your phone with another signer
Use 2-of-2 MuSig2 so your phone and a separate key must both approve every payment. You can also use a MuSig2 group as one cosigner in a larger threshold vault.
Bitcoin Core 31.1 is the tested second signer. A hardware wallet needs its own compatibility test. Keep the wallet backup file, the phone’s recovery words, and a separate backup of the other signer’s key. Every key is required.
Review a replacement’s fee and change before authorizing it. The original remains visible as replaced.
Inspect peers and control external disclosure
Inspect connected peers and network settings. Explorer links open only after an explicit warning about the information sent to that website.
Explorer websites are not wallet backends. A single or coordinated set of peers can still withhold information; multiple connections are not proof of independent operators.
Refresh the peer list
Download dated candidates from Winnow’s census without interrupting active peers. Reset and shuffle peers is a separate action.
Downloads expire after seven days, then automatic selection falls back to bundled candidates. Bundled and downloaded census entries count as the same trust source. Every selected peer still undergoes normal wallet checks.
Use winnow-debug for environment checks, simulator diagnostics, release-data generation, and network soak runs. These are operator tools, with their own command and protocol checks.
