The web wallet has no custodial accounts and no password reset. Nobody, including the xrpl.to team, can access it or move your funds.

The one way to recover a wallet is its seed: the native XRP Ledger secret. It works everywhere on the XRP Ledger — import it into xrpl.to on another device, or into any other XRPL wallet. A seed is a short string that starts with s, such as sEdxxxxxxxxxxxxxxxxxxxxxxxxxxxxx (format only, not a real seed).

Your seed is encrypted in your browser with AES-GCM, under a key only your password unlocks, and stored in this device’s IndexedDB. That binds the wallet to this device and this browser: it does not sync anywhere, and to use it on another device you import its seed there. It never leaves your browser and is never sent to our servers.

• Store it offline only, on paper or metal. Never in a screenshot, a text file, cloud storage or an online password manager.
• Never share it. xrpl.to will never ask for your seed; anyone who does is a scammer.
• Whoever has your seed has your funds, and XRP Ledger transactions cannot be reversed.

Don’t import the same seed into several platforms. If any one of them is compromised, every platform holding that seed is too.

Only enter your password on xrpl.to. Do not engage with any account on X claiming to be xrpl.to: the only one is @xrplto, it never messages you first, and nobody from xrpl.to will ever ask for your seed.