Yap Signer
Wallet risk notice
Last updated: October 24, 2026
Yap Signer is experimental software. It is a self-custodial Chrome wallet. The current build is 0.3.48. The Chrome Web Store listing is 0.3.48. Read this before you create, restore, or fund a wallet.
You hold the keys
Yap Signer stores your 24-word recovery phrase in an AES-256-GCM vault on this device. Yap does not have a copy of your seed, password, or private key. This website cannot create, import, export, or reset a wallet. If you lose the phrase, forget the password, or wipe the browser profile, Yap cannot recover the funds.
Blockchain transactions are irreversible
Sends, swaps, and other Solana transactions cannot be undone once they confirm. Wrong addresses, spoofed recipients, failed quotes, and network congestion are your risk. Review every transaction in the popup before you sign.
Silent signing is optional and constrained
Silent mode stays off until you generate a one-time yap_pat_ platform access token and paste it into an allowlisted Yap site. Signer still inspects the fee payer, DEX program allowlist, and SOL-out cap. Token (SPL) value is not included in that cap. Do not arm silent mode unless you understand those limits.
Network and software risk
Balances, quotes, and broadcasts depend on RPC providers, Jupiter, DexScreener, CoinGecko, and the Solana network. Any of those can be slow, unavailable, or incorrect. Browser extensions can contain bugs. Use amounts you can afford to lose while the software is experimental.
Custodial records 1 through 500
Yap does not custody customer crypto. The master wallet stays on your device and supports custodial wallet records numbered 1 through 500. A new account opens slots 1 through 5. Yap does not hold the private key for a slot. A hold, swap, or trade is stored only after silent mode is on for the master wallet and that slot, an approved custodial KYC case exists, and that slot's access code is used. That row is not signed and is not broadcast. The full rules are in the terms.
Member accounts
A member account is an email plus an 8-digit code. The code is stored only as a hash, it expires, and it is not returned in the HTTP response. The account password is stored only as a hash. It does not unlock the vault or approve a signature. A forgotten account password can be replaced after an emailed 8-digit code. That code does not reset the signer vault password. Each account has one referral code. The desk referral link is a public @username link on yap-pay.xyz. A new install with that code adds 5 credits. An influencer code is remembered on install and records nothing until a purchase or a Yap Cash deposit is reported. The influencer then gets a slice of Yap's share, and paid stays false. A yearly first-place prize is recorded as some SOL and is not sent. Public referral context: stevenlow.xyz/affiliate. People will buy SOL, ETH, or BTC through MoonPay or Stripe. The coins land in the wallet. Yap's revenue on that buy is a share of what those partners earn. It is not the card payment. A recorded purchase is not a promise to send funds, and Yap does not credit a balance when a purchase is marked reported. A later sale turns crypto into Yap Cash. A partner ramp deposits that into the customer's bank. Yap records a cash-out bonus on that deposit. A linked wallet is a signature of a message that does not move funds. This website does not receive a bank account, a card number, or the 24-word phrase.
Your responsibility
You are responsible for securing this device, the vault password, and the 24-word phrase; for verifying URLs and recipients; and for complying with laws that apply to you. Nothing on yap-pay.xyz is financial, legal, or tax advice.