Why registering asks for an email, how to give one without giving your name, and the open components doing the work underneath — none of which ever see the key that spends your bitcoin.
WhiSPa ships as an LNbits extension, so the wallet has a server-side account behind it. That account needs one contact address, and it is the only personal detail you are ever asked for.
The email has nothing to do with your bitcoin. Your spend key is derived and kept on your device and never reaches the server, so no one holding your email — us, your mail provider, or somebody who takes the account over — can move your coins. The other half of that matters just as much: the email cannot recover your bitcoin either. A reset link gets you back into the account; only your seed backup gets you back to your funds.
We don't care which address you use — so use one that isn't tied to your name. An alias forwards to your real inbox, so reset and device-confirmation mail still reaches you, while WhiSPa only ever stores the alias.
Free: SimpleLogin, addy.io, Firefox Relay or DuckDuckGo Email Protection for masked addresses, or a fresh account at Proton Mail or Tuta. Paid, if you already have one: Apple Hide My Email, Fastmail Masked Email, 1Password, or Bitwarden Premium.
Not an address you have given out anywhere else. A single-purpose alias means this account can't be correlated with your others by email address.
Put it in the email field when you register. Open the mail that arrives and either click the link or type the six-digit code it carries — either one creates the account.
Keep the alias in your password manager next to your WhiSPa username and password. Lose track of which alias you used — or let the alias itself lapse — and you lose the only route back into the account. Your seed still recovers the bitcoin; it does not recover the account.
WhiSPa is the interface. Open components do the work underneath, each with a single responsibility.
Derives keys and signs on your device. The server only broadcasts what you already signed.
WhiSPa ships as an LNbits extension, inheriting multi-user accounts, auth, and device confirmation.
BlindBit precomputes tweak and UTXO data so scanning is quick; Fulcrum serves lookups. Neither sees your spend key.
Every piece is open source and self-hostable — run your own and nothing sits between you and the chain.
The security model — where keys live and what a server compromise can and can't reach — is on Privacy & security.
WhiSPa