Cavos, Privy, Turnkey, Web3Auth, and Magic are the five Dynamic alternatives compared here for an embedded wallet.
The sections below use the same facts as the compare pages. Cavos publishes its own fees on the pricing page; other vendors set theirs independently. The one-to-one write-up is Cavos vs Dynamic. The replacement shortlist for Privy is Privy alternatives. Migration is a project, not a config change: wallet addresses are derived differently, so accounts do not transfer automatically.
Dynamic is not the weaker product. It covers ground several of these alternatives do not, especially multi-wallet login. Teams still shortlist replacements when they only need to provision new accounts, or when the chain is not an EVM connection layer.
Dynamic is strongest as a unified login and wallet-connection layer covering many wallets and chains. Connecting existing external wallets is a core capability. That is extra surface area when the product should never show a wallet picker and should only provision new accounts.
Dynamic serves crypto-native connection flows alongside embedded wallets. Teams whose users are not crypto-native, and should sign in with an identity the product already owns, look for a provision-only SDK.
Dynamic is multi-chain, with EVM breadth and additional non-EVM support; parity varies by chain. Teams building on Starknet or Stellar, or that want each chain’s native account model rather than an abstraction over it, look past an EVM-first connection layer.
Dynamic’s public Growth plan is $249/mo for up to 5,000 monthly active users, then $0.05 per extra MAU, with a free sandbox. Cavos is free up to 1,000 wallets, then Essential at $59/mo and Complete at $139/mo. Fireblocks acquired Dynamic in 2025. Acquisition is a vendor-risk input. It does not change who can produce a signature.
The category has consolidated. Stripe acquired Privy in 2025. Fireblocks acquired Dynamic in 2025. Consensys acquired Web3Auth in 2025 and now ships it as MetaMask Embedded Wallets. In 2026 Payward, the parent of Kraken, acquired Magic Labs wallet infrastructure.
Cavos, Privy, Dynamic, Turnkey, Web3Auth / MetaMask Embedded Wallets, and Magic all ship an embedded wallet. They do not share a key model, the same native chain coverage, or the same pricing. Each name opens the full comparison except Cavos, which links to published fees.
| Provider | Pricing and free tier | Chains | Key model |
|---|---|---|---|
| Cavos | Free up to 1,000 wallets. Essential $59/mo. Complete $139/mo. | Starknet, Solana, and Stellar. | Device-native. One stark key from MasterDEK and app salt. No MPC. Starknet uses an audited OpenZeppelin AccountUpgradeable v3.0.0. |
| Privy | Free (0–499 MAU) with 50K signatures and $1M volume/mo. Core $299/mo. Scale $499/mo. | Broad EVM support plus Solana; coverage and feature parity vary by chain. | User wallets: 2-of-2 Shamir shares reconstituted only in AWS Nitro Enclaves (enclave share + auth share). Key export is supported. Optional custodial wallets via Bridge. |
| Dynamic | $249/mo for up to 5,000 MAUs. Then $0.05 per extra MAU. Sandbox is free. | Multi-chain, with EVM breadth and additional non-EVM support; parity varies by chain. | Embedded wallet keys managed by the provider’s key infrastructure with configurable custody models. |
| Turnkey | Pay as you go: 1,000 wallets and 25 free signatures/mo, then $0.10/signature. Pro $99/mo. | Broad cryptographic curve and chain support at the signing primitive level. | In hardware-backed secure enclaves operated as infrastructure. |
| Web3Auth / MetaMask Embedded Wallets | Free 1,000 monthly active wallets. Growth $69/mo. Scale $399/mo. | Broad multi-chain coverage. | MPC / threshold shares combined to reconstruct a private key. |
| Magic | Free 1,000 monthly active wallets and 50K signatures. $99/mo includes 2,500 MAWs. | EVM-focused with additional chain support. | Delegated key management backed by hardware security modules operated by the provider. |
| Alchemy Account Kit | Free 30M compute units/mo. PAYG $0.525 per million CUs. Gas Manager: 8% admin fee on PAYG; free on testnets. | Many EVM networks plus Solana. Bundler, ERC-20 gas payments, and Bundler Sponsored Operations are documented for those EVM networks, not for Solana. | Bring-your-own signer. Wallet APIs leave login and keys to Privy (recommended), Turnkey, Openfort, or a viem-compatible signer. |
Cavos fees are from this site. Other fees are from each vendor's public pricing page as of October 2026 and can change.
Cavos is a Dynamic alternative when users should never see a wallet picker and the product is on Starknet, Solana, or Stellar. Cavos provisions the wallet rather than connecting to one the user already holds. Signing authority is a non-exportable device key: Cavos holds no key that can move user funds and does not reconstruct a master key with MPC.
One SDK ships chain-native adapters for those three networks. On Starknet each wallet is an audited OpenZeppelin account contract — AccountUpgradeable v3.0.0 — controlled by one stark key derived from the MasterDEK and app salt. Solana uses a native Ed25519 system account. Stellar uses a classic G-account. Recovery is off-chain: a new device restores the MasterDEK with a passkey or an opt-in hardware-isolated enclave. There is no on-chain device-signer list and no on-chain social recovery.
Cavos is not a drop-in for Dynamic. It does not connect existing extensions, and it is not an EVM-wide wallet layer. The two models can coexist in one product. Gas Sponsorship in Any Token is on every plan. The published free tier covers the first 1,000 wallet creates; Essential is $59/mo and Complete is $139/mo.
Embedded Starknet wallet, Embedded Solana wallet, Embedded Stellar wallet, How to Add an Embedded Wallet to a React App, Embedded Wallet API (2026): SDK Methods & Auth, Non-Custodial Embedded Wallets: How Self-Custody Works (2026), Embedded Wallet Providers Compared in 2026, and Wallet-as-a-Service (WaaS): How Embedded Wallet Platforms Work (2026).
Privy is a widely adopted embedded wallet and authentication provider focused primarily on EVM chains, offering both embedded wallets and external wallet connection.
Privy manages embedded wallet keys through its key-management infrastructure, with configurable self-custody and recovery options. Chain coverage is broad EVM plus Solana. Gas sponsorship is available through paymaster and bundler integrations, typically on EVM smart accounts. Connecting existing extensions is a core capability Cavos does not offer.
Choose Privy when the product is EVM-first, when you want a single vendor for embedded wallets and WalletConnect or injected wallets, or when you need the largest available ecosystem of integrations. Stripe acquired Privy in 2025. The public Developer free tier is 0–499 MAU with 50K signatures and $1M volume per month; Core is $299/mo and Scale is $499/mo.
Privy vs Turnkey is usually a layer question, not a feature checklist. Privy is a finished embedded wallet and authentication product. Turnkey is secure key-management infrastructure running in hardware-backed secure enclaves, exposed as a low-level API for building wallets and signing systems. You assemble the wallet experience on top of policy-driven signing primitives.
Keys live in remote enclaves, not on the end user’s device. Server-side signing, organizational policy, quorums, and approval workflows are the point of that design. Chain coverage is broad at the cryptographic-curve and signing-primitive level. Recovery is something you design on top of those primitives.
Choose Turnkey when you are building your own wallet or custody product. Choose a finished SDK when you want login, recovery, and sponsorship already wired. Turnkey’s public Pay as you go tier includes 1,000 wallets and 25 free signatures per month, then $0.10 per signature. Pro is $99/mo.
Web3Auth — shipped by Consensys as MetaMask Embedded Wallets after the 2025 acquisition — provides social-login wallets using multi-party computation. Key shares are split across the user’s device, the provider’s network, and recovery factors. Signing reconstructs or jointly computes a signature from those shares.
That is the clearest architectural contrast with Cavos. Cavos never reconstructs a signing key: the device derives the account key and signs. MetaMask’s product page states that Embedded Wallets use MPC with threshold signatures and Shamir’s Secret Sharing, and that export is part of the model. The same page lists native support for EVM and Solana, plus additional networks including Bitcoin and StarkNet.
Choose Web3Auth when you need very broad chain coverage from a single social-login wallet layer, or a key you can export and use in other tooling. Public pricing starts at a free Base plan with 1,000 monthly active wallets. Growth is $69/mo. Scale is $399/mo.
Magic offers embedded wallets and passwordless authentication, historically known for email magic-link login and a delegated key management model backed by hardware security modules. It pioneered invisible wallet onboarding and remains a strong choice for simple, email-first flows on EVM chains.
Signing is delegated to provider-operated infrastructure rather than a device-bound key. If access to the email account grants the provider the ability to sign, wallet security reduces to the security of that inbox. Cavos separates the two: identity selects which account you are, but a device factor is required to sign. In 2026 Payward, the parent of Kraken, acquired Magic Labs wallet infrastructure.
Choose Magic when you want the simplest possible email-link onboarding on EVM, or a mature provider for a straightforward wallet requirement. The public Developer plan includes 1,000 monthly active wallets and 50,000 signatures at $0/mo. The next listed team plan is $99/mo with 2,500 monthly active wallets.
Ask whether you must connect wallets users already hold first, then the custody question, then which chains are native.
Worked one-to-one comparisons live on the compare pages. For the category itself — what an embedded wallet is, and how embedded wallets vs browser extensions, MPC, and device-native models differ — start with the pillar guide.
Dynamic is the better pick when you need many external wallets alongside embedded ones in a single login flow. It is not the weaker product — it covers ground Cavos does not. Stay with Dynamic when the following are true.
There is no single best Dynamic alternative — the right pick depends on whether you must connect wallets users already hold. Cavos is the alternative when the product is on Starknet, Solana, or Stellar and users should never see a wallet picker. Privy is the more mature choice across EVM when you still want embedded wallets plus connectors. Turnkey is key-management infrastructure, not a finished SDK. Web3Auth / MetaMask Embedded Wallets fits broad social-login chain coverage. Magic fits simple email-first EVM onboarding. Dynamic itself remains the better pick for multi-wallet login.
Yes. Cavos is free for the first 1,000 wallet creates, then Essential at $59/mo and Complete at $139/mo. Web3Auth / MetaMask Embedded Wallets starts free at 1,000 monthly active wallets. Magic’s Developer plan includes 1,000 monthly active wallets and 50,000 signatures at $0/mo. Turnkey’s Pay as you go tier includes 1,000 wallets and 25 free signatures per month. Privy’s own Developer free tier is 0–499 MAU. Dynamic’s sandbox is free; the public Growth plan starts at $249/mo. Those figures are from each vendor’s public pricing page as of October 2026 and can change.
Cavos ships native adapters for all three: an audited OpenZeppelin account contract on Starknet, a native Ed25519 system account on Solana, and a classic G-account on Stellar. Dynamic is multi-chain, with EVM breadth and additional non-EVM support; parity varies by chain. MetaMask Embedded Wallets lists EVM, Solana, and additional networks including StarkNet on its product page.
No. Dynamic connects existing wallets and embeds new ones. Cavos only provisions a device-native account. If connecting MetaMask or WalletConnect is a requirement, Dynamic (or Privy) is the better fit, and the two models can coexist in one product. Wallet addresses are derived differently, so accounts do not transfer as a config change.
No. Cavos provisions and controls an embedded, device-native account for each user. If connecting existing external wallets is a requirement, a connection-focused provider such as Dynamic is the better fit.
Cavos is designed so a user never selects a wallet: they sign in with an identity you already own and a self-custodial account is resolved. Dynamic can also hide this, but its surface area is broader because it also serves crypto-native connection flows.
Start with the quickstart, or talk to us about a production integration.
We use anonymous analytics to understand how developers use Cavos. No personal data is collected. Privacy Policy
