Is Catena Wallet safe?

Catena Wallet derives its vault encryption key with only 10,000 PBKDF2 iterations, well below modern guidance.

Catena Wallet stores your seed phrase and private keys locally, encrypted with AES-256-GCM using a key derived from your password via PBKDF2-SHA256. That derivation uses only 10,000 iterations, far fewer than the 600,000+ recommended today, which makes offline password-guessing against a stolen copy of the encrypted vault file cheaper than it should be. The vault itself is not sent anywhere; the weakness only matters if someone obtains the encrypted blob directly, such as from a compromised device or backup.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.