Security

Even we can't change your address.

Glitter Gold Tag was designed so that the registry is never trusted with your money or your keys. Here's how.

We never hold keys or funds, and we never ask for a secret key or recovery phrase. If anyone does, it's a scam.

Every Glitter Tag is signed by your wallet. Without your signature, a change is refused.

Wallets verify your signature themselves. A hacked or wrong registry can only make a lookup fail. It can't hand out a fake address.

When payment details change, the new ones wait 24 hours. Your card shows a warning, and you can cancel a change you didn't make.

We read the ledger: if an address requires a destination tag or memo, a record without one is refused.

Confusable names (0 and o, rn and m, 1 and l) count as the same name, and big brands are reserved for their real owners.

Each version has a number. Wallets that remember it refuse an older version served later.

Every record says whether it's for Testnet or Mainnet, and wallets refuse the wrong one.

When you mark an address as your own wallet, that wallet signs too, so "wallet proven" on a card means something.

Before you send

Check the display name and wallet name match who you're paying.
Watch for a "change waiting" or "new owner" warning, and confirm with the person if you see one.
For big amounts, send a small test first.

Glitter Gold Tag currently runs on the test networks (Testnet). Mainnet opens after an independent security audit and legal review.

Found a security issue? Please tell us privately before sharing it publicly. Contact details will be posted here before launch.