--- title: Polkadot Vault (formerly Parity Signer) description: Use your old smartphone as an air-gapped wallet with Polkadot Vault, a secure cold storage solution for managing accounts and signing transactions. url: https://developer.polkadot.com/wiki/general/polkadot-vault/ word_count: 2037 token_estimate: 3774 version_hash: sha256:605f65005289f97794a9ed3e4dc4bab142d7ee5d875089be1f94bfa165d97a7f last_updated: 2026-11-01T15:55:43+00:00 --- !!!info "Rebranding of Parity Signer to Polkadot Vault" The Polkadot Vault app rebranding is live on [iOS](https://apps.apple.com/us/app/parity-signer/id1218174838) and [Android](https://play.google.com/store/apps/details?id=io.parity.signer) devices. The source code of all versions can be downloaded on [the GitHub repo](https://github.com/novasamatech/parity-signer/releases). The Polkadot Vault app is an air-gapped cold storage solution for all users, including developers and power users. See [Ledger](ledger.md) devices for other cold storage solutions. !!!warning "Smartphone compatibility with Polkadot Vault" Note that although the Vault app is available for old smartphones, different versions will be installed according to the phone's hardware. For example, smartphones like iPhone 6 will install Parity Signer (the old brand name of the Vault app) with limited capabilities. There will be no log or warning if the phone was connected to the internet while not using the app. Also, no metadata updates are possible, and no option to add new networks. This would not be as secure as the latest version of the app. We would recommend that you use smartphones compatible with the latest Polkadot Vault app.

How to Use Polkadot Vault
[Polkadot Vault](https://vault.novasama.io/) (formerly Parity Signer) is a cold storage solution that allows you to use a phone in airplane mode as an air-gapped wallet. The Vault app is not technically a wallet, as it does not allow to transfer funds. It is more of a key-chain tool that will enable you the create, manage, and restore accounts. By default, the Vault app contains chain specifications for Polkadot, Kusama, and Westend. Metadata updates are possible via a [QR code fountain](https://metadata.parity.io/#/polkadot). It is also possible to [add other Substrate-based chains and do metadata updates](#add-chains) for those. The app allows you to securely sign [extrinsics](../learn/learn-transactions.md) via QR codes without exposing your private keys to the internet. ## Vault vs. Ledger The Polkadot Vault and [Ledger](ledger.md) are cold storage solutions because private keys of accounts created on the Vault app or Ledger device are not stored on your computer or, more in general, on a device that has an internet connection. However, the two solutions differ, and you should consider one or the other depending on your user type. | Ledger | Polkadot Vault | | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------: | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------: | | Hardware designed to stay offline and be secure. Certified by French cybersecurity agency [ANSSI](https://cyber.gouv.fr/en). | Hardware not designed to stay offline. The user must switch off all inbound and outbound connections (network, wifi, Bluetooth, NFC). | | Hardware is resistant to side-channel attacks via [Secure Element](https://www.ledger.com/academy/security/the-secure-element-whistanding-security-attacks/). The secure element will destroy itself if opened. | Although there is no wired connection, side-channel attacks are possible. Without a secure element, the phone can be opened, and the keys will be accessible in its storage unit. | | Accounts derived from one mnemonic seed phrase. | One mnemonic for each account or one mnemonic for multiple accounts via [account derivation](../learn/learn-account-advanced.md#derivation-paths) or default [Substrate address format](../learn/learn-account-advanced.md#address-format). See [this article](../learn/learn-account-advanced.md) for information on whether to use the same account or different accounts on different chains based on your needs. | | Easy firmware and application upgrades through the Ledger Live application. | The app should never be connected to the internet after installation, so the version installed on the phone should not be updated directly. For [app upgrades](#update-the-vault-app), users must factory reset the phone and recover all accounts through seed phrases. Metadata updates for each chain must be done via the QR code fountain. | | Currently, not all parachains are supported. | Users can add all parachains either through a third-party provider or if they have the wss endpoint and know [how to extract the chain specifications and metadata](#add-chains). | | Ledger app updates on Ledger Live sometimes lag behind chain updates resulting in users only being able to transact if they [install developer versions](ledger.md) (only for advanced users). | Metadata updates are always available to install once released, either through the third-party provider or manually. In this case, the installation process requires familiarity with working on the command prompt. | ## Create and Import Accounts You can create a new account directly within the Vault app (Add Key Set > Add new Key Set). This will generate a new mnemonic seed phrase on the app. Alternatively, you can import a new account in the app using a seed phrase generated elsewhere with a compatible account generation scheme. For example, you can have an air-gapped laptop with the Subkey tool installed and generate a new account there. The seed phrase of that account can be imported into the Vault App (Add Key Set > Recover Key Set). For guidelines about how to create an account using Polkadot Vault, see [**this video tutorial**](https://youtu.be/hgv1R9mPEXw?t=120) and visit [**this article**](../learn/how-to/parity-signer-create-account.md). !!!info Importing an account into an extension will not import its private key. Only the public key will be imported and you must sign using your air-gapped phone which holds the private key. ## Restore Account on Polkadot Vault See [**this video tutorial**](https://youtu.be/hgv1R9mPEXw?t=407) and [**this page**](../learn/how-to/parity-signer-restore-account.md) to learn how to restore your account on the Polkadot Vault app. ## Signing Transactions Without Metadata With Polkadot Vault v7.0.0 and above, you can sign transactions without adding or updating the network metadata. This functionality must be supported by the wallet that you are using. Note that you still need to add the chain specification for the chain you wish to use. Signing a transaction using Polkadot Vault remains the same, except the wallet you use should present you with an animated QR code when you sign the transaction. This QR code contains all the data required to sign the transaction without updating the chain’s metadata in your Polkadot Vault. The data contained in the QR code is compressed, allowing for faster scanning. ## Signing Extrinsics !!!warning "Always check for Metadata Updates" Before signing extrinsics with the Polkadot Vault app, always check for metadata updates. [**This video tutorial**](https://youtu.be/gbvrHzr4EDY?t=328) will explain how to do it. Remember to always check for metadata updates before signing transactions. See [this article](https://github.com/w3f/polkadot-wiki/pull/4600/files#diff-5d4d0a286cdc7b1d016ee155f9694dbcddc13f5264490fc1a960c38000baca4d) to learn how to sign transactions and [this article](../learn/how-to/vault-add-chain-metadata.md) on how to easily add new chains and do metadata updates using the Vault app. The procedure to sign transactions with the Vault app is as follows: - The wallet or browser extension will show a QR code encoding the information about what you are going to sign. - After scanning the QR code with the Vault app, you will be presented with decoded information about what you will sign. Make sure the information matches what you intended to sign in the first place. If something does not feel right, do not sign. Check [this page](transaction-attacks.md#corrupted-qr-code-parity-signer) for more information and contact [the Polkadot Support Team](../../get-support.md). - If the information shown by the Vault app is correct, you can present the QR code (signature) to the camera on your laptop to sign for the transaction. !!!info "QR codes are signature-specific" Note that QR codes are signature-specific. If someone by chance has access to the QR code signature for one of your transactions, future transactions cannot be signed with that same QR code, and it is impossible to find out the private key of your account only with that QR code. ## Update the Vault App !!!danger Ensure you always have your mnemonic seed phrase secure and available. To securely update the Polkadot Vault app follow the instructions [here](https://github.com/novasamatech/parity-signer/blob/master/docs/src/tutorials/Upgrading.md). Briefly, - backup your accounts (Backup key Set > write down the mnemonic seed phrase), - factory reset your Vault app (Settings > Wipe all Data), - factory reset your phone, - re-install the Vault app, - go offline (airplane mode, no wifi), - recover your accounts (Add Key Set > Recover Key Set). ## Security Notes !!!info "Remove SIM cards and Forget Networks" To avoid unintended connection of your phone to the Internet, remove SIM cards, reset eSIM settings, and forget any added WiFi networks. In this way, the only possibility of having an unintended internet connection is either through the cellular network or through WiFi connection. The Vault app has a Log that will tell you all activities performed with it. It is important to mark down the last action, you did so that you can do a security check the next time you use the app. Also, the Vault app will always tell you if the phone has been (even briefly) connected to the Internet. In case of an unrecognized connection, it is recommended to: - Backup your accounts (i.e. make sure you have the mnemonic seed phrases) - Follow the steps in [Update the Vault app](#update-the-vault-app) - Once offline, create a new account on the Vault app - Import the compromised accounts and transfer the funds to the new non-compromised account. !!!danger "The Vault App has the option to export private keys" If an account's private key has been exported from the Vault app, the public key will be marked as "hot" and the following message will be displayed _This key is marked hot because its root private key has been exported_. You might consider exporting the private key if you are switching air-gapped phone. If you choose to export your private key, avoid the following: - Do not export your private key to a device that is connected to the internet, as your key will not be "cold" anymore. - Do not print private keys QR codes over an internet connection. ## Add Chains The Vault app contains default chain specs for Polkadot, Kusama, and Westend. It is possible to add more chains via QR-code, and update their metadata by generating your own QR-code fountain in a metadata portal similar to that [signed by Parity](https://metadata.parity.io/#/polkadot). Alternatively, you can use a third-party provider to add chains and their metadata. Check [this article](../learn/how-to/vault-add-chain-metadata.md) for detailed instructions. If you choose this approach, you should trust the provider you choose. --- !!!info "Polkadot-JS Guides" If you are an advanced user, see the [Polkadot-JS guides about Polkadot Vault](../learn/learn-guides-vault.md). ## How-to guides - [Polkadot Vault — How to Add a New Chain and Update Metadata](../learn/how-to/vault-add-chain-metadata.md) - [Polkadot Vault — How to Add Your Account](../learn/how-to/vault-add-account.md) - [Parity Signer — How to Create an Account](../learn/how-to/parity-signer-create-account.md) - [Parity Signer — How to Restore Your Account](../learn/how-to/parity-signer-restore-account.md) - [Parity Signer — How to Sign a Transaction](../learn/how-to/parity-signer-sign-transaction.md) - [Parity Signer — How to Add Your Account](../learn/how-to/parity-signer-add-account.md) - [Polkadot Vault — How to Create an Account](../learn/how-to/vault-create-account.md) - [Polkadot Vault — How to Restore Your Account](../learn/how-to/vault-restore-account.md) - [Polkadot Vault — How to Sign a Transaction](../learn/how-to/vault-sign-transaction.md) - [Polkadot Vault — How to Create the Same Account on Different Networks](../learn/how-to/vault-same-account-networks.md) - [Polkadot Vault — How to Replicate an Account for Asset Hub](../learn/how-to/vault-replicate-account.md)