Three owners. Two approvals.
Your phone, the Orrerie server and your offline recovery card each hold a separate signing key. Every supported asset wallet needs approval from two of them to move funds.
For an ordinary payment, you approve on your phone and the server checks the transaction before adding its signature. Keep the offline recovery card separate for when you need it.
Make room for Funding and Spot
Funding and Spot have their own addresses, balances, transaction histories and signing keys. Choose which wallet set to use before reviewing a payment.
Each set has one wallet per supported network. Supported tokens on that network use the same wallet, so adding an asset does not create a duplicate address.
On supported networks, Funding and Spot can share network-fee funding within your Orrerie account. Covering a fee does not grant access to the other wallet’s funds.
See the details before you sign
Choose the asset, network, amount and recipient. Then review the payment and its costs in one place. Your phone and the server both check the exact transaction.
Activity keeps the resulting receipt, including confirmation and delivery updates where available.
- Send and receive supported assets
- Find a payment route with Universal Pay
- Follow transfers in Activity
- Manage Funding and Spot separately
Made for iOS
Orrerie is an invite-only iOS wallet and is not available on the App Store. New users choose Continue with email in the app and verify their address. An invite code skips the line: tap Have an invite code? on the welcome screen or the waiting screen.
Returning users also choose Continue with email and use the email linked to Orrerie. No new invitation is needed. Open Account → Email & sign-in to view your email, manage paired devices or sign out.
Return to your account
Sign in to reconnect your existing wallets, transaction records and Payme profile. Contacts, your account photo, display preferences, saved drafts and recent assistant text return from their last completed sync.
Wallet signing keys are separate. To send, this phone still needs the matching phone key and the usual approvals. On a new phone, use the dedicated wallet recovery flow; signing in does not create new wallet addresses.
Sign-out attempts to save your latest changes first. If sync cannot finish, the app lets you retry or keep the unsynced changes on that phone. Check Account for sync status before relying on another device.
Frequently asked questions
How does two-of-three ownership work?
Each asset wallet has three owners: your phone, the Orrerie server and an offline recovery card. Any transaction needs two of their signatures. In everyday use, you approve on the phone and the server checks the transaction before co-signing. The offline key stays separate for recovery. One key alone cannot move the funds.
What is the difference between Funding and Spot?
They are separate wallet sets within your Orrerie account, each with its own addresses, balances, activity and signing keys. Choose Funding or Spot before reviewing a payment. Moving funds between them is a transaction with the relevant network costs and security checks.
Why is a server involved in a self-custody wallet?
The server holds one of three signing keys and applies your wallet’s spending rules before it co-signs. It cannot spend with its key alone. Your phone and offline recovery card are the two user-controlled owners. The normal phone-and-server payment flow depends on server availability, while recovery depends on the remaining owner material. With a Recovery kit you exported beforehand, the Orrerie Recovery tool can move funds with your phone and offline-card recovery words, without the server.
Do I need the offline card for every payment?
No. Ordinary payments use your phone and the server. The offline recovery card holds a separate owner’s recovery material and should stay safely stored. It is not an everyday login method, and it cannot recover or spend funds by itself. Keep it away from the phone’s recovery secrets.
Does Face ID replace my passphrase?
Face ID can make local access and signing more convenient when enabled. Spot can also use its own PIN. These features protect an unlock method; they do not replace the underlying passphrase or your recovery setup. Keep the required recovery material available even if you normally unlock with biometrics.
Can I use every token on a supported network?
No. Orrerie supports specific assets and transaction types on each network. The app’s asset selection shows the supported choices for the action you are taking. A token’s symbol alone does not identify it: the network and contract matter. Check the receiving instructions before transferring an asset into the wallet.
Where do I check what happened after sending?
Open Activity or the saved receipt for that action. Orrerie separates sending confirmation from destination delivery when a payment uses a route. If a result is pending or unknown, check the existing record before sending again. Closing a receipt does not turn a pending transaction into a failed one.
Do I need a new wallet when I sign in again?
No. Signing in reconnects your existing wallet records and addresses. A phone that still holds the matching encrypted key can use it after the usual unlock. A new phone needs the matching phone recovery words or the separate offline-card recovery flow before it can sign. Account access alone cannot move funds.
What happens when I hide a wallet?
Hiding changes which wallets appear on Home. It does not move funds, remove the wallet or exclude its balance from your portfolio total. Open Account → Hidden wallets to bring it back. Hiding a wallet also does not hide its transactions on the blockchain.
Interested in Orrerie?
Request access