Verify Signing
Check that transaction signing stays local.Bitpurz prepares transaction data from node UTXOs, but private signing happens in the browser. Broadcast sends only signed raw transaction hex after explicit user action.
Signing Flow
Prepare, review, sign, broadcast.Normal review
- Load a private wallet or address-only source.
- Refresh UTXOs for the selected network.
- Enter destination, amount, fee rate, and optional test-network message.
- Prepare the unsigned payload and review inputs, outputs, fee, and change.
- Sign locally, then broadcast only the signed raw transaction hex.
Offline signing check
- Prepare the unsigned payload while online.
- Disconnect before signing for stronger key isolation.
- Sign in the saved or loaded wallet page.
- Reconnect only when you are ready to broadcast signed hex.
Transmission Boundary
What the server sees.Not sent
- Seed words and passphrases.
- WIFs, private keys, and xprv values.
- Signing material or private key data.
Sent only by action
- Addresses for UTXO lookup.
- Fee/status requests without wallet secrets.
- Signed raw transaction hex for explicit broadcast.
Mainnet uses real BTC. Use a small amount first and review destination, change, and fee before broadcast.