Bringing it all together
Connect is the backend that lets Tenshu on your desktop and Keychain on your phone act as one. It's optional: the wallets work without an account, and your keys never touch it. When you want your devices to coordinate (remote signing, shared contacts, inheritance), Connect is the rail they talk over.
What Connect glues together
The coordination that turns two apps into one experience, only when you ask for it.
Accounts, contacts & Cubes
Your account, and the Cubes and contacts you choose to share with. The address book behind multisig and inheritance.
Remote signing
Keychain signs what Tenshu builds. The unsigned transaction travels over Connect; the key stays on the phone.
Inheritance & estate
Coordinate heirs and a time-locked handoff across devices and people, so a Vault can pass on without a third party in the middle.
Alerts
Coming soonKnow when a device signs or a timelock is approaching, across every device on your account.
What it sees, and what it never sees
Connect coordinates; it never custodies. The wallets keep working without it.
What Connect sees
- Your account (an email to reach you at)
- Your extended public keys, normally as encrypted key envelopes sealed to your own devices’ keys, which Connect stores and relays but cannot open
- Some extended public keys in the clear: a key created outside a Cube, or one whose re-share for a Cube has not completed
- Each key’s fingerprint and derivation path, so it can be matched to the right device
- Encrypted signing requests: transaction drafts travel end-to-end encrypted between Tenshu and Keychain, and Connect routes the ciphertext
- Transaction drafts from signing sessions created before end-to-end encryption, kept for history in a form Connect can read
- Optionally, the address lookups Tenshu makes through Connect’s Esplora proxy to watch balances — network-level, not tied to your account, not logged, and avoidable by pointing Tenshu at your own node or Esplora endpoint
What Connect never sees
- Your private keys or seed: they never leave your devices
- Your PIN
- Transaction drafts from new signing sessions in the clear
- Any ability to move your funds on its own
Sovereignty, stated plainly
No account required
The wallets run without Connect. Create your keys, receive, and spend with no sign-up, Connect only enters the picture when you want your devices to coordinate.
Keys never leave your devices
Connect stores encrypted key envelopes and routes encrypted signing requests between your devices; it holds no key that can open either. Signing happens on your devices; the private keys never travel.
Your own validation
Chain validation can be entirely yours: install a pruned Bitcoin Knots node in-app, or point Tenshu at your own Esplora endpoint. That's a Tenshu capability, Connect simply stays out of the way.
The tiers are Connect entitlements
The wallets are free. What you pay for (inheritance-grade coordination, more Cubes, priority support) is delivered through Connect.
Pricing opens at launch.