Skip to Content
FAQ

Frequently Asked Questions

General

What is WaaP?

WaaP (Wallet as a Protocol) is a self-custodial wallet that doesn’t require seed phrases. It uses two-party computation to split your keys between your device and a secure enclave, so no single party can access your funds.

Is WaaP free?

WaaP is free for end users — you only pay network gas fees for transactions. For developers, WaaP is free to integrate with a revenue-share model (no per-seat or per-signature billing). Agent and CLI usage may have separate pricing — check waap.xyz  for current details.

What chains does WaaP support?

WaaP supports EVM chains (Ethereum, Optimism, Base, Arbitrum, Polygon, and more), Sui, and Stellar (as a signer). Solana support is planned.

Security

Where are my keys stored?

Your keys are split into two shares:

  • One share on your device (derived from your login)
  • One share on the decentralized WaaP network

Neither share alone can sign transactions.

What if I lose my phone?

You can recover access using any login method you’ve set up (email, phone, Google, etc.). We recommend setting up multiple methods.

Can WaaP access my funds?

No. WaaP only holds one share of your key. Without your share, no one — including WaaP — can move your funds.

Using WaaP

How do I back up my wallet?

You don’t need to. Your wallet is tied to your login credentials. As long as you can log in, you have access.

Can I use WaaP with hardware wallets?

WaaP is designed to provide hardware-wallet-level security without a physical device. Hardware wallet integration is not currently supported.

How do I export my keys?

Key export is available for users who need it. This generates a standard private key you can import elsewhere. Note: once exported, your security model changes to a traditional single-key setup.

WaaP for Agents

Can my WaaP wallet be used by AI agents?

Yes. WaaP provides a headless CLI (@human.tech/waap-cli) for AI agents and scripts. Agents sign up with email + password, get a standard wallet address, and can send transactions, sign messages, and query balances — all from the command line. Install with npm install -g @human.tech/waap-cli@latest.

How do I control what my agent can do?

WaaP has a layered security model for agents:

  • Policies — Set daily spend limits and auto-approve rules for low-risk operations (waap-cli policy set --daily-spend-limit 500)
  • 2FA — Enable two-factor authentication so high-risk transactions require your approval via Telegram, email, phone, or hardware wallet (waap-cli 2fa enable --telegram <chat_id>)
  • Privileges — Scoped, time-limited tokens (max 2 hours) that let an agent bypass 2FA for pre-approved operations within defined constraints

New accounts start with 2FA disabled. If you want fully autonomous agent operation within policy limits, you don’t need to enable 2FA. For high-value operations, enable 2FA to stay in the loop.

What is a Privilege?

A Privilege is a scoped, time-bounded token that lets an agent or dApp bypass 2FA for specific operations. You define the constraints:

  • Allowed addresses — which recipients the agent can send to
  • Chain — which network the token is valid for
  • Spend limit — maximum USD value across all transactions under this token
  • Duration — how long the token lasts (max 2 hours, enforced server-side)

Once granted, transactions matching the scope are signed automatically. If 2FA is disabled on your account, Privileges are unnecessary — the agent can already transact freely within policy limits.

How do I approve or revoke my agent’s access?

  • To approve: When 2FA is enabled and your agent attempts a transaction that exceeds policy limits, you’ll receive an approval request via your chosen 2FA method (Telegram, email, phone, or hardware wallet). Approve or deny from there.
  • To revoke: Disable the agent’s session by changing the account password, or adjust policies with waap-cli policy set. Privileges expire automatically after their duration (max 2 hours).
  • To shut down: Run waap-cli logout on the agent, or change the account password to invalidate all sessions.

Need more help?

Click the chat bubble in the bottom-right corner to talk to Iris, our AI support agent. It can answer most questions instantly or connect you with a team member. You can also reach us on Discord .

Last updated on