Check a receive address is really yours

Before you receive anything significant, confirm the address SignBit shows you genuinely belongs to your vault. You can do this yourself, offline, without trusting our display.

1. Why bother

A receive address is the one place where a compromised or dishonest platform could quietly divert incoming funds. Deriving the address yourself removes us from the equation entirely.

2. Get your vault descriptor

Download the vault backup from your vault page. It contains the descriptor, which is the public recipe listing every key and the threshold. It cannot spend anything, so it is safe to keep alongside your other records.

3. Derive the address yourself

In Fountain, save the descriptor under Vaults and derive the address at the index you want. This works with no network connection at all. Sparrow can do the same from the same descriptor.

4. Compare, character by character

The address you derived and the one SignBit shows must match exactly. If they differ in any character, do not send funds. Contact support immediately.