How to Check If a Bitcoin Wallet Is Safe (5-Minute Test)
You can check if a bitcoin wallet is safe in about five minutes using WalletScrutiny, an independent non-profit that tests whether a wallet’s app actually matches its published source code. If a wallet passes all of their tests, that is a strong trust signal. If it is closed source or custodial, you should know that before trusting it with your savings.
How to check if a bitcoin wallet is safe with WalletScrutiny
WalletScrutiny has reviewed thousands of bitcoin wallets across mobile, hardware, desktop, and web. Their review process runs 17 separate tests on each wallet, and the central question is simple: can independent experts verify that the app you download was built from the public source code?
When the answer is yes, the wallet is called reproducible. That matters more than most people realize. A reproducible wallet means anyone can take the published code, compile it themselves, and confirm the result matches the app in the store. A company running a reproducible wallet cannot quietly slip extra code into the download without getting caught. A closed-source wallet asks you to take that on trust.
WalletScrutiny is volunteer-run, donation-funded, and does not sell rankings. That independence is exactly why it is worth using: nobody pays for a good verdict.
The 5-minute safety check
Here is the exact process. It takes about five minutes the first time, and under a minute once you know what you are looking at.
- Search for your wallet. Go to walletscrutiny.com and type the wallet’s name into the search. Make sure you pick the right product, since popular wallets attract imitations with similar names.
- Read the verdict badge first. Every wallet page opens with a verdict that summarizes all 17 tests. This single badge tells you most of what you need to know.
- Check your platform, not just the wallet. A wallet can pass on Android and fail on iPhone, because each app is built and reviewed separately. Scroll to the section for the exact platform you use.
- Check the review date. Wallets update constantly, and a verdict from two years ago describes an app that no longer exists. A recent review is worth far more than an old one.
- Read the details behind the badge. Each verdict page explains what passed and what failed in plain language. Spend two minutes here. The difference between “build issues” and “missing source code” changes what you should do next.
What the verdicts mean
WalletScrutiny uses a fixed set of verdicts. Here is what each one means for you in practice:
- All tests passed. The strongest result. Either the app is provably built from the published source, or the product does not need compiled apps at all. This is the verdict you want for any wallet holding meaningful savings.
- Build or source-code issues. Some code is public, but reviewers could not prove the released app was generated from it. There may be an innocent explanation, or there may not. Treat this wallet with caution and keep only small amounts in it until the verdict improves.
- Missing source code. The wallet is closed source. The code running on your phone is a black box, and you are trusting the company’s word about what it does. Acceptable for pocket money you spend this week. Not acceptable for savings you need in ten years.
- User only gets an IOU. The wallet is custodial. The provider holds your bitcoin and you hold an account balance. If the company freezes withdrawals, gets hacked, or goes bankrupt, your coins are at risk. This is the opposite of self-custody, no matter how slick the app looks.
- Untrustworthy handling of keys. The product exposes your private keys to less secure systems by design, or signs transactions blindly on their behalf. There is no amount of convenience that justifies this. Do not use it.
- Fake. The listing imitates a popular wallet and is very likely fraudulent. If this is on your phone, delete it immediately, and if you entered a seed phrase into it, consider those funds compromised.
- Pending review. WalletScrutiny knows about the product but has not finished testing it. Check back later rather than assuming the worst, or the best.
What WalletScrutiny cannot tell you
A clean verdict means the code is honest. It does not mean your download is safe. Scammers publish fake copies of popular wallets in app stores, buy ads for phishing sites that look pixel-identical to the real one, and send DMs pretending to be support staff. No code audit protects you from installing the wrong app.
So the second half of the safety check is on you: always get the download link from the wallet maker’s official website, typed into your browser by you. Never install a wallet from an ad, an email link, a search result you did not verify, or a link someone sent you. And no test ever devised can detect a photo of your seed phrase sitting in your camera roll, or a “support agent” sweet-talking you into reading out your backup.
Think of it as two gates. WalletScrutiny answers “is this software trustworthy?” Your own habits answer “did I get the real thing, and am I using it safely?” You need both gates closed.
What to do if your wallet scores badly
Do not panic, and just as importantly, do not rush. Moving bitcoin under pressure is how mistakes happen.
If your wallet is custodial and you want real self-custody, the order of operations matters. First, set up a reputable self-custody wallet that passes all tests. Second, back up its new seed phrase properly, on paper at minimum, and verify the backup by restoring it. Third, send a small test transaction to the new wallet and confirm it arrives. Only then move the rest, and leave a tiny amount behind until you are fully confident.
If your wallet is closed source but non-custodial, decide by amount. Pocket money for the week can stay where it is while you research alternatives. Savings should move to a wallet with a clean verdict. And one rule with no exceptions: never type your existing seed phrase into a new app you have not verified yet. If there is any chance your current phrase was exposed, perhaps to a “fake” verdict app, do not import it into the new wallet. Create a fresh wallet with a fresh phrase and move the funds.
