Product updates for the Cavos embedded wallet SDK, plus guides for adding a self-custodial wallet to your app on Starknet, Solana, and Stellar.
Start with what an embedded wallet is, then the React integration, then a provider comparison if you already have a shortlist.
Custody models, key management, and how to choose an SDK.
A plain definition: how an embedded wallet works, who holds the key, and when to use one.
Wallet as a service in 2026: definition, Privy, Dynamic, Turnkey, Dfns, Para vs Cavos, pricing units, and build versus buy.
Auth, wallet create, key handling, signing, gas, and recovery, and how Cavos exposes that surface.
Custodial vs MPC vs hardware-isolated passkeys: who can sign, and how to verify a vendor’s claim.
Install @cavos/kit, wrap CavosProvider, sign in, and send a sponsored transaction.
App Router client boundary, env vars, callback URLs, vault origins, first sponsored execute.
In-app UX versus a contract account. They can be the same wallet.
Chain first, then custody, then connect versus provision. Not a single winner.
Best practices for embedding a wallet SDK in a React or Next.js app with Cavos.
When users should sign in an embedded wallet versus a MetaMask-style browser extension.
Pricing, chains, and key models for Cavos, Privy, Dynamic, Turnkey, Magic, and Web3Auth.
How much embedded wallets cost in 2026: per-MAU, per-wallet, and per-signature list prices at 10k to 1M users.
Finished auth SDK versus enclave signing infrastructure, with Dfns.
Provision versus connect: TEE user wallets versus TSS-MPC, plus a short Turnkey note.
Wallet APIs versus a signer. Account Kit is deprecated; Alchemy recommends Privy.
Install @cavos/kit, sign in with Google, Apple, or email, and send a sponsored Stellar payment.
Install @cavos/kit, sign in with Google, Apple, or email, and send a paymaster-sponsored Starknet transaction.
Accept USDC with an embedded wallet on Stellar, Solana, or Starknet, with Gas Sponsorship in Any Token.
Cavos vs hosted wallets and extensions across custody, chains, and recovery.
The control test under MiCA, FinCEN, California, and related regimes.
When teams look past Privy the embedded crypto wallet, and which architecture actually fits.
Finished embedded-wallet SDKs versus Turnkey’s enclave signing infrastructure.
Provision-only wallets versus Dynamic’s multi-wallet connection layer.
Device-native keys versus Magic’s email-first delegated HSM wallets.
Device-native keys versus Para’s 2-of-2 MPC wallet at getpara.com.
Device-native keys versus Web3Auth / MetaMask Embedded Wallets MPC shares.
Finished embedded-wallet SDKs versus Dfns MPC/TSS wallet infrastructure.
Audited OpenZeppelin AccountUpgradeable v3.0.0 with a native stark key.
Native Ed25519 system account with a relayer as fee payer.
Classic G… account, one Ed25519 key from the MasterDEK, sponsored reserves and fees.
Release notes and security write-ups for @cavos/kit, including our open-source enclave and Kit 0.5.0 and Sign in with Telegram (Kit 0.5.2).
@cavos/kit 0.5.2 adds Telegram as an optional hosted login, verified inside the attested enclave. Plus enclave release v2, accepted through signed releases.
The Cavos recovery enclave is now open source. Read the code that restores wallets. Plus @cavos/kit 0.5.0: GitHub sign-in and signed enclave releases.
Cavos v1.1.9 adds native Cartridge Slot support, a built-in relayer, and cavos-account hardening: offset-injection protection and a self-revocation guard.
We use anonymous analytics to understand how developers use Cavos. No personal data is collected. Privacy Policy