Guarded by the
Summo co‑signer
Self‑custody with the convenience of a hot wallet, plus the controls that make it warm: multisig policies, guardian‑gated seed export, and social recovery.
Your keys
What opens your wallet, and who holds the keys.
Assets land in your wallet
Two keys open your wallet
You hold two keys. Summo holds one.
You're never locked into Summo
By default, Summo co-signs with you
Your primary and backup keys are enough.
Summo’s key can never sign without you.
The policy guard
Summo only co-signs after a payment clears your policies and a risk check.
The rules you set for your money.
Summo screens every payment for risk.
Backup
Resilient against disasters, from a lost seed phrase to a lost phone.
Your keys come from one seed
Your seed is encrypted
Your seed is backed up with your guardians
Recovery takes a quorum
Generated on your device from hardware entropy, and shown to you when you create your wallet.
Even with your unlocked phone, a thief can't read it, and your backup key is never stored.
An encrypted copy lives with the people you trust, so a lost phone never loses your seed.
Your guardian hands back the encrypted copy, and it decrypts on your device alone. No one ever sees your seed — not your guardians, not Summo.
Secure by design.
Summo is built to be secure at every layer, from the audited contracts up.
Built on audited multisig
Your money sits in Safe on EVM chains and Squads on Solana: the same audited multisig that already secures billions across crypto.
You hold the keys
Two of the three keys are yours. Summo can't move your money without you, and you can walk away to any other wallet whenever you want.
Guarded on every payment
Your own spending policies, live risk screening, and guardian recovery.
To learn more about how Summo secures your money, read the security documentation →