top of page

Xaman (formerly Xumm) is the leading self‑custody mobile wallet for the XRP Ledger (XRPL) and the Xahau network, designed for everyday use while giving users full control of their keys and assets. It supports unlimited XRPL accounts, all tokens and stablecoins issued on XRPL/Xahau, NFTs, and deep integration with the ecosystem via in‑app “xApps” that let users interact with dApps, swaps, and DeFi without leaving the wallet.

What Xaman is and who it’s for

Xaman is a non‑custodial (self‑custody) wallet: your private keys live on your device (or on optional hardware cards), and you alone control your funds. It targets both newcomers and power users in the XRPL ecosystem—people who hold XRP, use XRPL stablecoins, collect NFTs, or interact with XRPL projects that require wallet sign‑ins. The wallet is developed by XRPL Labs (The Integrators B.V.), a Netherlands‑based team that has supported the XRPL community for over five years and also provides libraries and infrastructure used by many XRPL projects.

Core features and capabilities

  • Self‑custody and account control: You generate and store your own Secret Numbers (seed/mnemonic). Xaman never holds your keys, and you can import existing XRPL accounts or create new ones.

  • Unlimited accounts: Manage many XRPL accounts in one place, useful for separating holdings, testing, or managing multiple identities.

  • All XRPL/Xahau assets: Send, receive, and hold XRP, stablecoins, and any other token issued on the ledger, plus NFTs.

  • xApps ecosystem: Built‑in mini‑apps (“xApps”) provide access to swaps, DeFi yield, DEX tools, and other XRPL services directly inside the wallet. Recent additions include native swapping for any XRPL asset and one‑click DeFi vault strategies via Flare Smart Accounts.

  • Fast, low‑fee transactions: XRPL transactions typically settle in seconds with very low network fees, which Xaman leverages for smooth payments and interactions.

  • Multi‑language support: A major update expanded language support to dozens of languages, making the wallet accessible to billions of speakers worldwide and improving onboarding safety by letting users read prompts in their native language.

  • Hardware security option (Xaman Cards): Optional NFC hardware cards (powered by Tangem) generate and store private keys on an isolated chip; keys never leave the card, adding strong protection against phone loss or compromise.

Security model and audits

Xaman emphasizes security through multiple layers: device‑level protections (passcode, biometrics), app‑level encryption, and optional hardware signing with Xaman Cards. The wallet underwent an independent security audit by Cossack Labs in 2021 (when it was still called Xumm), which led to a redesigned cryptographic layer and a large jump in its security score—from 43% to 89% against OWASP MASVS requirements after fixes.

Key security points highlighted by the team:

  • Secret Numbers are everything: Anyone with your Secret Numbers can fully control your XRPL account; Xaman repeatedly warns never to share them.

  • Brute‑force mitigations: The app limits passcode attempts and introduces long delays after repeated failures, making exhaustive guessing impractical.

  • Local signing: When connecting to websites or xApps, Xaman never shares private keys; it displays the transaction, signs locally on your device (or card), and returns only the signature.

  • Decentralization resilience: Because XRPL is decentralized and Xaman is self‑custody, no single entity (including XRPL Labs or a government) can freeze your XRP or access your account without your keys.

How it compares to cold/hardware wallets

Xaman functions as a hot wallet on your phone but offers hardware‑level security via Xaman Cards. The team notes that the mathematical security of your account (the huge number of possible secrets) is the same whether generated online or offline; the main practical risk is device loss or compromise, which the cards mitigate by keeping keys on a tamper‑resistant chip that never exposes them. Unlike many hardware wallets that reveal a seed phrase you could be tricked into sharing, Xaman Cards keep the keypair entirely on the card, so there’s no seed to leak.

Availability, pricing, and support

Xaman is free to download on iOS and Android, with optional in‑app purchases for “Xaman Unrestricted” subscriptions that unlock extra features (historically including push notifications, profiles, and on/off‑ramp options in some regions). Official support is provided through the in‑app Xaman Support xApp; the team emphasizes that they never DM users on social media.

Practical considerations and cautions

Because Xaman is self‑custody, security ultimately depends on user behavior: keeping your device updated, using strong passcodes/biometrics, backing up Secret Numbers safely, and being cautious with unknown links, QR codes, or trustlines. The help docs explicitly warn that while the wallet itself is robust, risks like phishing, malicious tokens, or social engineering can still lead to losses if users approve bad transactions or share secrets.

If you tell me your use case (e.g., long‑term XRP holding, frequent DeFi, NFT collecting, or dev testing), I can suggest a tailored setup—such as whether to add Xaman Cards, how to structure multiple accounts, and which xApps are most relevant.

bottom of page