OneSwap Wallet: The Essential Safety Guide

Protect your PIN. Back up your key. Never skip the memo.

OneSwap Wallet is a self-custody Canton wallet. That means you and only you control your funds. Your private key is encrypted in your browser and never touches our servers. This gives you real ownership, but it also means there are three things OneSwap cannot do for you:

1. We cannot reset your PIN.

2. We cannot recover your private key.

3. We cannot retrieve CC sent to an exchange without a memo.

This guide walks you through how to protect yourself against all three in about five minutes.

1. Your Wallet PIN: What It Is and Why Losing It Matters

When you create your OneSwap Wallet, you set a 6-digit PIN. This PIN encrypts your private-key vault locally in your browser. It is not a login password stored on a server, it is the encryption key to your wallet.

What this means in practice:

• OneSwap never sees your PIN and cannot reset it. There is no "Forgot PIN" email.

• If you forget your PIN, you cannot unlock your vault even if you can still sign in with Google. Google sign-in restores your encrypted backup; your PIN is what decrypts it.

How to protect yourself

• Choose a PIN you will remember, but others can't guess. Avoid 123456, your birth year, or repeated digits.

• Store your PIN securely offline. Write it down and keep it somewhere safe, or save it in a reputable password manager. Never store it in a plain note titled "OneSwap PIN" on a shared device.

• Never share your PIN with anyone including anyone claiming to be OneSwap support. Our team will never ask for your PIN, private key, or backup file. Anyone who does is trying to steal from you.

If you've already lost your PIN

Your path back is your exported private key. If you backed it up (see Section 2), you can import your wallet fresh and set a new PIN. If you did not back up your private key and cannot recall your PIN, your funds cannot be recovered by you or by anyone else. This is the hard reality of self-custody, and it's why Section 2 is the most important part of this guide.

2. Back Up Your Private Key - Today, Not Someday

Your private key is your wallet. Everything else the PIN, the Google backup, the browser vault is just a way of protecting and accessing that key.

What OneSwap Wallet does automatically

When you create your wallet with Google sign-in, an encrypted backup of your vault is saved to your Google Drive's hidden app-data folder. Only the encrypted file is stored Google can't read it, and neither can OneSwap. This backup lets you restore your wallet on a new device or after clearing your browser data.

But the Google backup alone is not enough. It still requires your PIN to decrypt. Lose the PIN, and the backup is a locked box with no key.

What you must do manually

Export and store your private key. This is your ultimate recovery tool — it works even if you forget your PIN, lose access to your Google account, or switch devices entirely.

How to back it up safely:

1. Export your private key from the wallet (you'll be prompted for your PIN).

2. Write it down on paper or store it in an encrypted password manager.

3. Keep a second copy in a separate physical location if the wallet holds significant value.

4. Never store it in plain text in email drafts, cloud notes, screenshots in your camera roll, or chat apps these are the first places attackers look.

5. Never type it into any website, form, or DM. The only legitimate place to enter it is the import screen at wallet.oneswap.cc.

Quick self-check

Ask yourself right now:

• ✅ Do I know my PIN?

• ✅ Have I exported my private key and stored it offline?

• ✅ Could I restore my wallet if my laptop was stolen today?

If any answer is no, stop reading and fix it before you continue.

3. Sending CC to an Exchange? The Memo Is Not Optional

This is the single most common and most painful mistake we see.

When you withdraw or send Canton Coin (CC) to a centralized exchange (CEX), the exchange gives you two things:

1. A deposit address

2. A memo (sometimes called a tag, reference, or deposit ID)

Exchanges use one shared address for many customers. The memo is how the exchange knows the deposit belongs to you. Send CC without the memo, and your funds arrive at the exchange — but land in limbo, uncredited to any account.

Before you hit Send, check three things

1. Copy the exact deposit address from the exchange never type it by hand.

2. Copy the exact memo from the same deposit page. Every character matters. No extra spaces.

3. Confirm both on the review screen. OneSwap Wallet shows you a confirmation modal with the amount, recipient, and fee before you sign. This is your last checkpoint read it, don't skim it.

Rule of thumb: if the exchange shows a memo field, the memo is mandatory. When in doubt, check the exchange's CC deposit instructions before sending.

If you already sent CC without a memo

Don't panic but act fast:

1. Do not send another transaction hoping it fixes the first one.

2. Contact the exchange's support, not OneSwap. Only the receiving exchange can credit a memo-less deposit. Most CEXs have a recovery process, though it can take days or weeks and some charge a fee.

3. Gather your transaction details before you open the ticket: the transaction hash, amount, date/time, and your sending address. You'll find these in your OneSwap Wallet History tab.

4. Provide those details to the exchange and follow their verification steps.

OneSwap cannot reverse, redirect, or recall a completed transaction — no one on Canton can. The transaction did exactly what the network was told to do; the memo is between you and the exchange.

4. A 5 Minute Safety Checklist

Do this once, and future-you will thank present-you:

Frequently Asked Questions

I forgot my PIN. Can support reset it?
No. Your PIN encrypts your vault locally and is never sent to OneSwap. Restore access by importing your backed-up private key and setting a new PIN.

Can I change my PIN?

Yes, you can change your PIN from settings in the wallet.

I lost both my PIN and my private key. What now?
Unfortunately, there is no recovery path. Self-custody means no one not OneSwap, not Google holds a master key. This is why exporting your private key is step one after creating any wallet.

Does signing in with Google mean Google holds my crypto?
No. Google Drive stores only an encrypted backup file in a hidden app-data folder. Google cannot read it, and OneSwap cannot decrypt it. Custody stays with you, in your browser.

I sent CC to an exchange without a memo. Can OneSwap recover it?
No only the receiving exchange can. Open a support ticket with them and include your transaction hash from the wallet's History tab.

Someone claiming to be OneSwap support asked for my private key. Is that legit?
Never. OneSwap will never ask for your PIN, private key, or backup file not in Telegram, not in email, not anywhere. Report and block them.

Questions? Reach the OneSwap community through our official channels only. On TG t.me/oneswap_community Stay safe, and swap on.