TigerPass is a self-custody crypto wallet based on the Tiger Tally (虎符) model. Human wallet: Face ID creates wallet via Passkey PRF, no seed phrase, export mnemonic anytime. AI Agent wallet: Apple Secure Enclave keys for OpenClaw agents, on-chain Session Keys with spending limits. Quantum-ready: BTC public key hidden, EVM signatures upgradable. Free, 30-second setup.
Face ID / Touch ID creates a WebAuthn Passkey. Passkey PRF derives deterministic wallet seed. No seed phrase to memorize. Export BIP-39 mnemonic anytime from Settings. Phishing-proof: Passkey domain-bound to tigerpass.net. Quantum protection: BTC fresh change addresses, EVM upgradable signatures. Gas fees sponsored (free).
Built for OpenClaw agents (211k+ GitHub stars). Apple Secure Enclave generates P-256 keys that never leave the chip. ECDH + HKDF derives secp256k1 for Ethereum signing. CLI: tigerpass init, tigerpass register, tigerpass pay. On-chain Session Keys (ERC-7579) enforce spending limits. E2E encrypted agent messaging. ERC-8004 on-chain identity. Details at tigerpass.net/agent.
Neither half alone has full power. Together, they command. Phase 1: Agent self-bootstraps. Phase 2: Human joins. Phase 3: Atomic transition — human becomes sole Owner, agent gets Session Key. Human = Emperor (sovereignty), Agent = General (delegation).
Bitcoin: fresh change address per transaction, public key never exposed. Ethereum: ERC-4337 Smart Account with upgradable post-quantum signatures. Harvest Now Decrypt Later attacks already happening. TigerPass is the only wallet with quantum protection deployed today.
In ancient China, a bronze tiger split in two granted power only when reunited.
Your Passkey guards the human half. Secure Enclave guards the machine half.
Together — the Tiger Tally for a new era.
30 seconds • No seed phrase • Hardware-secured
The Emperor's Half
Your face is your key. Face ID and Touch ID prove you're human — biometric proof that no AI can forge. The Passkey wallet gives you Web2 convenience with Web3 ownership.
Face ID creates your wallet in 30 seconds. Passkey PRF derives your seed — no 12 words to write down. Export your mnemonic anytime for full self-custody.
Passkeys are cryptographically bound to tigerpass.net. Fake sites can't steal your credentials. Phishing — the #1 cause of crypto theft — becomes technically impossible.
BTC: fresh change address per transaction, public key never exposed. EVM: Smart Account with upgradable post-quantum signatures. Protected before you need it.
Think bank accounts, not blockchain addresses. One account holds your BTC, ETH, USDC across chains. We handle the addresses and gas.
Create Passkey
Face ID / Touch ID creates a WebAuthn Passkey in your device’s Secure Enclave. Synced via iCloud or Google.
Derive Seed
Passkey PRF derives a deterministic seed. Same Passkey always produces the same wallet. No seed phrase to memorize.
Full Control
Your wallet is live. Export the mnemonic anytime for backup. Or rely on Passkey sync. You own your keys, always.
The General's Half
Apple Secure Enclave generates unforgeable machine keys — identity that's as hardware-anchored as your Face ID, but for AI. The first true “machine Passkey” for autonomous agents.
P-256 keys generated inside Apple Silicon. Never extracted, never exported. ECDH computation happens within the hardware boundary. The strongest identity guarantee for machines.
Agent bootstraps its own Safe wallet with a single CLI command. Receives funds, signs transactions, communicates with other agents — all without human intervention.
On-chain spending limits, allowed contract addresses, method whitelists, time expiry. The policy engine lives on-chain — tamper-proof and transparent.
X25519 ECDH + AES-256-GCM encrypted messaging. SE P-256 signatures prove identity. Agents negotiate, trade, and collaborate — servers see only ciphertext.
Human
Passkey Owner
Safe Account
Machine
SE Key Holder
A Safe Smart Account — one wallet, two guardians. The Emperor sets the rules. The General executes within them. Neither half alone has full power. Together, they command.
Phase 1
Agent creates its own Safe wallet. Full control to receive funds and operate independently. No human needed.
Phase 2
Human becomes co-Owner via Passkey. Both can operate. Human observes and learns the Agent's patterns.
Phase 3
Atomic transaction: remove Agent as Owner, grant Session Key with spending limits. Human controls. Agent executes.
Wealth, payments, and autonomous agents — all secured by hardware.
BTC & ETH
Own the assets that have outperformed everything in the last decade. 100x vs S&P 500's 2.5x. Your generation's real estate.
USDC & Stablecoins
Send and receive money anywhere. No borders, no banks, no delays. Dollar-backed stability with blockchain speed.
AI-Native Finance
Let AI agents pay for subscriptions, negotiate deals, and trade services autonomously. The only wallet built for the machine economy.
Seedless convenience. Quantum resistance. Hardware-anchored identity. Three layers of protection you won't find anywhere else.
Quantum-proof by architecture
Smart Account future-proofing
$140B+ in crypto lost forever to forgotten seed phrases. James Howells lost 8,000 BTC on a hard drive. Stefan Thomas has 2 guesses left for 7,002 BTC.
With TigerPass, your Passkey is your seed. Synced across devices. Export mnemonic anytime.
This can never happen to you.
The only wallet built for both humans and machines.
| Feature | TigerPass | MetaMask | Ledger | Coinbase |
|---|---|---|---|---|
| Passkey (Face ID / Touch ID) | ||||
| No Seed Phrase Hassle | ||||
| Export Mnemonic Anytime | ||||
| Phishing Immune (domain-bound) | ||||
| BTC Public Key Hidden | ||||
| Post-Quantum Migration Path | ||||
| AI Agent Wallet (Session Keys) | ||||
| Hardware Identity (Secure Enclave) | ||||
| Smart Account (ERC-4337) | ||||
| E2E Encrypted Messaging |
Trusted Infrastructure
Built on Safe—the same infrastructure trusted by Worldcoin, Ethereum Foundation, Vitalik Buterin, and Reddit.
Everything about the Tiger Tally, Passkeys, quantum security, and AI Agent wallets.
TigerPass is a self-custody crypto wallet inspired by the ancient Chinese Tiger Tally (虎符). It provides hardware-secured wallets for both humans (via Passkey/Face ID) and AI agents (via Secure Enclave). Together they form a complete system for digital sovereignty in the age of AI.
In ancient China, a bronze tiger was split in two — the Emperor kept one half, the General the other. Only when both halves matched could military orders be executed. TigerPass reimagines this for crypto: your Passkey is the Emperor's half, your AI Agent's Secure Enclave key is the General's half. Together they form a complete custody model.
Your Face ID / Touch ID creates a WebAuthn Passkey. Passkey PRF (Pseudo-Random Function) deterministically derives your wallet seed — no 12 words to write down or lose. You can export your mnemonic anytime from Settings for backup. Same security, infinitely better UX.
Yes. Your private keys are derived from your Passkey and stored locally. We never have access to your keys or funds. You can export your standard BIP-39 mnemonic and import it into any wallet. This is not custodial — it's self-custody with hardware-backed security.
AI agents (running on Mac Mini, cloud servers, etc.) can create their own wallets using Apple Secure Enclave. The SE generates unforgeable keys that never leave the hardware. Agents can transact autonomously within human-set spending limits (Session Keys), and humans can revoke access anytime.
Phase 1: Agent creates its own Safe wallet (self-bootstrap). Phase 2: Human joins as co-Owner. Phase 3: Human becomes sole Owner, Agent downgrades to Session Key holder with on-chain spending limits. The Agent operates within policy — the human retains ultimate control.
Quantum computers will break ECDSA cryptography (securing all current crypto) within 5-15 years. TigerPass protects you now: Bitcoin uses fresh change addresses per transaction so your public key is never exposed. Ethereum uses Smart Accounts (ERC-4337) with upgradable signature algorithms — seamless migration to post-quantum when ready.
Yes. TigerPass uses P2WPKH addresses with fresh change addresses for every transaction. Your public key is never broadcast to the network. Even with quantum computers, attackers have nothing to attack. This works automatically — no action needed on your part.
PRF (Pseudo-Random Function) is a WebAuthn extension that derives deterministic secrets from your Passkey. TigerPass uses it to generate your wallet seed. Same Passkey always produces same wallet. It's hardware-backed (Secure Enclave), synced via iCloud/Google, and phishing-proof (bound to tigerpass.net domain).
Your Passkey syncs via iCloud (Apple) or Google Password Manager (Android). Get a new phone, sign in, and your wallet is there. For extra security, you can also export your mnemonic as a backup. AI Agent keys are hardware-bound — if the device is lost, the human Owner can replace the Agent from the Safe.
TigerPass: Face ID login (no seed phrase), quantum protection (BTC public key hidden), AI Agent delegation (Session Keys), phishing immune (Passkey). MetaMask: seed phrase required, no quantum protection, no agent support. Ledger: hardware protection for storage only, same ECDSA vulnerability to quantum attacks.
Attackers record encrypted blockchain data today, waiting for quantum computers to decrypt it in the future. For blockchain this is critical because all transactions are permanently public. A transaction you make today could be attacked in 2035. TigerPass's quantum readiness protects against this.
The Tiger Tally for the AI era. Hardware-secured. Quantum-ready. Self-custody.
Free • No app download • 30 seconds