IBEX Security Center

Self-Custody Explained

Self-custody means your assets are controlled by keys that only you hold. IBEX does not operate an account that stores your funds, and there is no IBEX-side password reset that can restore access to a wallet.

How Private Keys Work

A private key is the secret that authorises transactions from an address. Your recovery phrase is a human-readable representation from which your keys are derived. Anyone holding either can move your assets.

Recovery Phrase Safety

Treat the phrase as the wallet itself.

• Write it down on paper or metal and store it offline.
• Never photograph it, type it into a note app, or store it in cloud storage or email.
• Never enter it into a website - the IBEX website will never ask for it.
• Consider a second copy in a separate secure physical location.

Local Storage

Wallet data is held on your device in encrypted form and protected by the password you set. If the device is lost and you have no backup of your recovery phrase, the wallet cannot be recovered.

Device Security

Your wallet is only as secure as the device running it.

• Keep the operating system and browser updated.
• Use full-disk encryption and a device lock.
• Avoid installing software from unverified sources.
• Be cautious with remote-access or screen-sharing tools.

Recognising Phishing

Impersonation is the most common way wallet users lose funds.

• Unsolicited 'support' contact via email, SMS, social media or ads.
• Urgency: claims your wallet will be locked, migrated or lost.
• Look-alike domains with extra words, hyphens or different endings.
• Any request to 'validate', 'sync' or 'migrate' a wallet by entering a recovery phrase.

How to Verify Downloads

Download IBEX only from an official IBEX domain. Where a checksum and signature are published for a release, verify the file before running it. If verification values are not published for a release, treat unofficial mirrors as untrusted.

What IBEX Support Will Never Ask For

IBEX support does not need - and will never request - any of the following:

• Recovery phrase or seed phrase
• Private keys
• Wallet password or PIN
• Remote control of your device to 'fix' a wallet
• A transfer of funds to a 'safe' or 'verification' address

Lost Recovery Phrase

If your recovery phrase is lost and you no longer have access to an installed wallet, the funds cannot be restored by IBEX or by anyone else. This is a consequence of self-custody, not a service limitation. Anyone claiming they can recover a lost phrase for a fee is running a scam.

Reporting Suspicious Activity

If you encounter a fake IBEX website, app or social account, report it to security@ibexwallet.co.uk or through the contact form. Never include wallet credentials in a report.