Review checklist before an app holds value.

Keys

• Can you say where the signing key is generated, and where it is stored while the app is closed?
• Does the app ever display the full secret after setup? If it does, why, and who else can see that screen?
• If the key lives on another device, does the app show you exactly what it asks that device to sign?

Signing

• Before a signature is requested, does the screen show every output, the destination and the fee?
• Can you run a complete test with a small amount you control, from building the transaction to broadcasting it?
• Can a rejected or abandoned signing request be found and explained later?

Data

• Which files does the app write, where do they live, and can other apps on the same device read them?
• Is exported history encrypted, or clearly marked as sensitive before you save it?

Network

• Can you list every host the app contacts during a normal session?
• Can you route its traffic through a proxy you choose, and does the app still work that way?
• If notifications pass through a relay, can you say what that relay sees: timing, addresses, or both?

Recovery

• Have you restored from your written material on a clean device, without the original one present?
• Does the app explain what happens to funds if the app itself disappears?
• Is there a documented way to move funds without this app?

Recording your answers

Keep the checklist with the app's version number and the date you checked it. Run it again after any update that touches keys, signing or network code. Write down each question you could not answer. An open question is a finding, not a pass.

Nettlewick does not review, rank or endorse specific apps. This checklist does not certify any product, and it does not replace an independent security review for an app that holds funds.