Skip to main content
Short answers, each with the page that goes further.
No. Gerfaut contains no code that generates private keys, handles seeds or signs transactions, and it refuses anything that contains a private key. See What is Gerfaut.
Gerfaut is new and has had little testing. It holds no private key, so a bug cannot move your bitcoin. A bug can still show a wrong address, amount or balance.
  • Check: Confirm every address and amount on your signing device before you rely on it.
  • Report: Select Report a problem in Settings > About to open an issue on GitHub for anything that looks wrong. See Contact.
  • Spot it: Every version numbered 0.x is a beta. Settings > About shows a Beta label next to the version.
Any wallet you can export as a descriptor, an extended public key or an address: single-sig, multisig, Miniscript policies with timelocks, BSMS records and the export files of other wallets. See Wallet types.
Yes, if the device or its companion software exports the public side of the wallet as text, a file or a QR code. See Add a wallet.
Yes on Android, once you turn on New transactions in Settings > Notifications, then select Live or an interval under Check for transactions. Both keep running after you leave Gerfaut, until you force-stop it. On desktop, Gerfaut notifies you only while it runs, minimised or locked included. See Check when notifications arrive.
The addresses of your wallets and your IP address. While Live runs, it also sees how long Gerfaut stays connected. Point Gerfaut at your own node to keep all of it to yourself. See Backend.
Your IP address, and no wallet data. Gerfaut asks the source in these cases:
  • Fiat value on: Once a minute while Gerfaut is open. The desktop Overview also asks for the price history of the range it shows.
  • Android Bitcoin price widget placed: Once a minute while Gerfaut is open, and about every 15 minutes in the background, even with the fiat value off.
The source is mempool.space by default. With Automatic, it is one of the public servers Gerfaut syncs with on mainnet. CoinGecko is the source once you select it, or once you select one of the 23 currencies only CoinGecko quotes.With a .onion backend, every price request goes through Tor, and neither source sees your IP address. The widget then fetches the price only through a Tor that already runs, and otherwise keeps the last price.The fiat value is off by default. See Units and fiat.
Yes, at most once a day, starting a day after you first open it, and without downloading anything. Turn the check off in Settings > About. See Install on Android or Install on desktop.
Encrypted on the device, with its encryption key in the credential store of the operating system. The app lock only hides the list from someone at your device. See App lock.
Export an encrypted backup as a file or an animated QR code, then restore it on the other device with the same password. See Backup and sync.
No. Your wallets are still on the device that made the backup, so export a new one there with a new password. See Backup and sync.
No. Start Gerfaut again on an empty vault, then restore your last backup. See App lock.
Select Try again first. If the screen comes back, its title says why:
  • Gerfaut is already open: On Android, wait a moment, then select Try again. On desktop, another Gerfaut window holds the vault. Switch to it, or close it.
  • The vault could not be opened: On desktop, check that the credential store of your system lets Gerfaut read its vault key.
  • Gerfaut could not start: On Android, The vault is here, but the key that opens it is gone. follows a phone restore or a move to a new phone. Select Start over… and confirm with Start over. Gerfaut sets the old vault aside, deletes nothing and opens the page to restore your last backup.
A compromised phone or computer could show you an address that is not yours. Your signing device is the one place that can confirm it. See Receive.
Another question? See Contact.