Skip to main content

Private Key Management

Deploy.Finance uses Privy.io to generate and store a private key for an embedded wallet that is assigned to your email address. This gives you full custodial ownership of funds and agent delegation.

Key generation process​

  1. User authentication. When you sign up with an email, Privy generates a cryptographic seed phrase deterministically from the authentication credentials using secure hashing algorithms.
  2. Key derivation. Privy uses industry-standard key derivation functions like BIP-39 and BIP-44 to create a private key from this seed. Each email maps to a unique wallet address.
  3. Secure storage. The private key is encrypted client-side using HPKE (Hybrid Public Key Encryption) before storage. Decryption is only possible by the authenticated user.

Smart contract wallets​

Privy implements smart contract wallets (ERC-4337 for Ethereum) that separate authentication from transaction authorization. The email serves as an authentication factor. The private key remains under user control.

Daily use​

You can use your email address and the security code emailed to your account to access Deploy.Finance and authorize delegation activities.

Alternatively, you can export your private keys for full ownership. See Export Your Private Keys.