Cavos, Privy, Dynamic, Web3Auth, and Magic are the five Turnkey alternatives compared here for an embedded wallet.
The sections below use the same facts as the compare pages. Cavos publishes its own fees on the pricing page; other vendors set theirs independently. If the question is a finished SDK versus key-management infrastructure, start with Cavos vs Turnkey or Privy vs Turnkey. The replacement shortlist for Privy is Privy alternatives. Migration is a project, not a config change: wallet addresses are derived differently, so accounts do not transfer automatically.
Turnkey is not the weaker product. It covers ground several of these alternatives do not, especially policy-driven server-side signing. Teams still shortlist replacements when they want a finished wallet SDK rather than infrastructure they assemble.
Turnkey is key-management infrastructure: hardware-backed enclaves and a signing API you build a wallet on top of. Teams that want login, recovery, and sponsorship already wired look for a finished embedded-wallet SDK instead of assembling one.
Turnkey keys live in remote enclaves operated as infrastructure. Some security reviews want the signing key on the end user’s device, with the vendor holding no key that can move funds. That is a different architecture, not a smaller feature set.
Server-side signing, organizational policy, quorums, and approval workflows are the point of Turnkey. They are extra surface area when the product should only sign from the user’s device and should never initiate a spend from a backend.
Turnkey’s public Pay as you go tier includes 1,000 wallets and 25 free signatures per month, then $0.10 per signature; Pro is $99/mo. Signature metering changes the bill quickly. Cavos prices on wallet creates: free up to 1,000 wallets, Essential $59/mo, Complete $139/mo.
The category has consolidated. Stripe acquired Privy in 2025. Fireblocks acquired Dynamic in 2025. Consensys acquired Web3Auth in 2025 and now ships it as MetaMask Embedded Wallets. In 2026 Payward, the parent of Kraken, acquired Magic Labs wallet infrastructure.
Cavos, Privy, Dynamic, Turnkey, Web3Auth / MetaMask Embedded Wallets, and Magic all ship an embedded wallet or the signing layer one is built on. They do not share a key model, the same native chain coverage, or the same pricing. Each name opens the full comparison except Cavos, which links to published fees.
| Provider | Pricing and free tier | Chains | Key model |
|---|---|---|---|
| Cavos | Free up to 1,000 wallets. Essential $59/mo. Complete $139/mo. | Starknet, Solana, and Stellar. | Device-native. One stark key from MasterDEK and app salt. No MPC. Starknet uses an audited OpenZeppelin AccountUpgradeable v3.0.0. |
| Privy | Free (0–499 MAU) with 50K signatures and $1M volume/mo. Core $299/mo. Scale $499/mo. | Broad EVM support plus Solana; coverage and feature parity vary by chain. | User wallets: 2-of-2 Shamir shares reconstituted only in AWS Nitro Enclaves (enclave share + auth share). Key export is supported. Optional custodial wallets via Bridge. |
| Dynamic | $249/mo for up to 5,000 MAUs. Then $0.05 per extra MAU. Sandbox is free. | Multi-chain, with EVM breadth and additional non-EVM support; parity varies by chain. | Embedded wallet keys managed by the provider’s key infrastructure with configurable custody models. |
| Turnkey | Pay as you go: 1,000 wallets and 25 free signatures/mo, then $0.10/signature. Pro $99/mo. | Broad cryptographic curve and chain support at the signing primitive level. | In hardware-backed secure enclaves operated as infrastructure. |
| Web3Auth / MetaMask Embedded Wallets | Free 1,000 monthly active wallets. Growth $69/mo. Scale $399/mo. | Broad multi-chain coverage. | MPC / threshold shares combined to reconstruct a private key. |
| Magic | Free 1,000 monthly active wallets and 50K signatures. $99/mo includes 2,500 MAWs. | EVM-focused with additional chain support. | Delegated key management backed by hardware security modules operated by the provider. |
| Alchemy Account Kit | Free 30M compute units/mo. PAYG $0.525 per million CUs. Gas Manager: 8% admin fee on PAYG; free on testnets. | Many EVM networks plus Solana. Bundler, ERC-20 gas payments, and Bundler Sponsored Operations are documented for those EVM networks, not for Solana. | Bring-your-own signer. Wallet APIs leave login and keys to Privy (recommended), Turnkey, Openfort, or a viem-compatible signer. |
Cavos fees are from this site. Other fees are from each vendor's public pricing page as of October 2026 and can change.
Cavos is a Turnkey alternative when you want a finished embedded wallet rather than key-management infrastructure. The wallet is embedded in the application. Signing authority is a non-exportable device key on the user’s device, not a remote enclave: Cavos holds no key that can move user funds and does not reconstruct a master key with MPC.
One SDK ships chain-native adapters for those three networks. On Starknet each wallet is an audited OpenZeppelin account contract — AccountUpgradeable v3.0.0 — controlled by one stark key derived from the MasterDEK and app salt. Solana uses a native Ed25519 system account. Stellar uses a classic G-account. Recovery is off-chain: a new device restores the MasterDEK with a passkey or an opt-in hardware-isolated enclave. There is no on-chain device-signer list and no on-chain social recovery.
Cavos is not a drop-in for Turnkey. Turnkey is a signing API you build on; Cavos is login, recovery, and Gas Sponsorship in Any Token already wired. It does not offer general server-side signing or organizational quorums. The published free tier covers the first 1,000 wallet creates; Essential is $59/mo and Complete is $139/mo.
Embedded Starknet wallet, Embedded Solana wallet, Embedded Stellar wallet, How to Add an Embedded Wallet to a React App, Embedded Wallet API (2026): SDK Methods & Auth, Non-Custodial Embedded Wallets: How Self-Custody Works (2026), Embedded Wallet Providers Compared in 2026, and Wallet-as-a-Service (WaaS): How Embedded Wallet Platforms Work (2026).
Privy is a widely adopted embedded wallet and authentication provider focused primarily on EVM chains, offering both embedded wallets and external wallet connection.
Privy manages embedded wallet keys through its key-management infrastructure, with configurable self-custody and recovery options. Chain coverage is broad EVM plus Solana. Gas sponsorship is available through paymaster and bundler integrations, typically on EVM smart accounts. Connecting existing extensions is a core capability Cavos does not offer.
Choose Privy when the product is EVM-first, when you want a single vendor for embedded wallets and WalletConnect or injected wallets, or when you need the largest available ecosystem of integrations. Stripe acquired Privy in 2025. The public Developer free tier is 0–499 MAU with 50K signatures and $1M volume per month; Core is $299/mo and Scale is $499/mo.
Dynamic provides wallet connection, embedded wallets, and authentication tooling with a strong emphasis on multi-wallet login experiences and developer-facing configuration. Connecting existing external wallets is a core capability. Cavos provisions the wallet rather than connecting to one the user already holds. The two models can coexist in one product.
Embedded wallet keys are managed by the provider’s key infrastructure with configurable custody models. Dynamic’s public pricing page lists TSS-MPC key management as a plan feature. Chain coverage is multi-chain, with EVM breadth and additional non-EVM support; parity varies by chain. Gas sponsorship is supported through account abstraction and paymaster integrations, mainly on EVM.
Fireblocks acquired Dynamic in 2025. That is a vendor-risk and custody-stack input, not a reason to treat the products as interchangeable. Dynamic’s public Growth plan is $249/mo for up to 5,000 monthly active users, then $0.05 per extra MAU. A sandbox is available for integration testing before live mode.
Embedded Wallet vs Browser Extension: Where Should Users Sign?.
Web3Auth — shipped by Consensys as MetaMask Embedded Wallets after the 2025 acquisition — provides social-login wallets using multi-party computation. Key shares are split across the user’s device, the provider’s network, and recovery factors. Signing reconstructs or jointly computes a signature from those shares.
That is the clearest architectural contrast with Cavos. Cavos never reconstructs a signing key: the device derives the account key and signs. MetaMask’s product page states that Embedded Wallets use MPC with threshold signatures and Shamir’s Secret Sharing, and that export is part of the model. The same page lists native support for EVM and Solana, plus additional networks including Bitcoin and StarkNet.
Choose Web3Auth when you need very broad chain coverage from a single social-login wallet layer, or a key you can export and use in other tooling. Public pricing starts at a free Base plan with 1,000 monthly active wallets. Growth is $69/mo. Scale is $399/mo.
Magic offers embedded wallets and passwordless authentication, historically known for email magic-link login and a delegated key management model backed by hardware security modules. It pioneered invisible wallet onboarding and remains a strong choice for simple, email-first flows on EVM chains.
Signing is delegated to provider-operated infrastructure rather than a device-bound key. If access to the email account grants the provider the ability to sign, wallet security reduces to the security of that inbox. Cavos separates the two: identity selects which account you are, but a device factor is required to sign. In 2026 Payward, the parent of Kraken, acquired Magic Labs wallet infrastructure.
Choose Magic when you want the simplest possible email-link onboarding on EVM, or a mature provider for a straightforward wallet requirement. The public Developer plan includes 1,000 monthly active wallets and 50,000 signatures at $0/mo. The next listed team plan is $99/mo with 2,500 monthly active wallets.
Ask whether you are buying a wallet product or signing infrastructure first, then where the key lives, then which chains are native.
Worked one-to-one comparisons live on the compare pages. For the category itself — what an embedded wallet is, and how embedded wallets vs browser extensions, MPC, and device-native models differ — start with the pillar guide.
Turnkey is the better pick when you are building a wallet or custody product on policy-driven enclaves. It is not the weaker product — it covers ground Cavos does not. Stay with Turnkey when the following are true.
There is no single best Turnkey alternative — the right pick depends on whether you want a finished SDK or signing infrastructure. Cavos is the alternative when the product is on Starknet, Solana, or Stellar and the review requires a device-native key. Privy is the more mature finished SDK across EVM. Dynamic is stronger when you must connect wallets users already hold. Web3Auth / MetaMask Embedded Wallets fits broad social-login chain coverage. Magic fits simple email-first EVM onboarding. Turnkey itself remains the better pick when you are building a wallet or custody product on policy-driven enclaves.
Yes. Cavos is free for the first 1,000 wallet creates, then Essential at $59/mo and Complete at $139/mo. Web3Auth / MetaMask Embedded Wallets starts free at 1,000 monthly active wallets. Magic’s Developer plan includes 1,000 monthly active wallets and 50,000 signatures at $0/mo. Privy’s own Developer free tier is 0–499 MAU. Turnkey’s Pay as you go tier already includes 1,000 wallets and 25 free signatures per month. Those figures are from each vendor’s public pricing page as of October 2026 and can change.
Cavos ships native adapters for all three: an audited OpenZeppelin account contract on Starknet, a native Ed25519 system account on Solana, and a classic G-account on Stellar. Turnkey’s coverage is broad at the cryptographic-curve and signing-primitive level; you still assemble the wallet UX. MetaMask Embedded Wallets lists EVM, Solana, and additional networks including StarkNet on its product page; feature parity still varies by chain.
No. They sit at different layers. Turnkey is a signing API with remote enclaves, policy, and server-side signing. Cavos is a finished embedded wallet SDK: auth, a device-native account, recovery, and Gas Sponsorship in Any Token. Wallet addresses are derived differently, so accounts do not transfer as a config change.
Mostly a building block. Teams frequently use Turnkey to build something similar to what Cavos or Privy ships as a product. The decision is usually build-versus-buy rather than a like-for-like SDK swap. Privy vs Turnkey is the same fork from the finished-product side.
Privy is a finished embedded wallet and authentication product. Turnkey is key-management infrastructure: hardware-backed enclaves and a signing API you build a wallet on top of. The worked write-up is Privy vs Turnkey.
Start with the quickstart, or talk to us about a production integration.
We use anonymous analytics to understand how developers use Cavos. No personal data is collected. Privacy Policy
