The Pi Coin wallet is not an app you download. It is a web app inside a second Pi app called Pi Browser, and the private key it creates never leaves your phone. That one decision explains nearly everything that goes wrong for Pi holders: no password reset, no recovery email, nobody at Pi Network who can help once the secret is lost or copied.
Read this before you migrate a balance, send Pi to an exchange, or type a word list into anything. Our sources are Pi's own support pages, the deposit instructions Kraken and OKX publish, Ledger's and Trezor's machine-readable asset lists, and direct reads of Pi's Horizon API on 27 July 2026.
With PI near $0.082 on 27 July 2026, many balances are worth less than their owners hoped. That does not make a custody mistake cheaper. It makes it permanent for no upside.
What the Pi Coin wallet actually is
A non-custodial wallet reached only through Pi Browser, served at wallet.pinet.com. Pi Network's own FAQ leaves no room for interpretation: "You are the sole owner of your Wallet's private key in the form of a passphrase, which is generated locally on your phone and never comes to Pi's servers", and the wallet "will not be recoverable from Pi Network's servers." Older material calls it wallet.pi, since every .pi domain also resolves through .pinet.com — two strings for one app.
There is no other official wallet. Pi's GitHub holds a stellar-core fork and payment SDKs, but no wallet repository and no key-derivation spec, and Pi's KYB-verified business list names seven exchanges, three on/off-ramps, two other services and zero wallets.
Pi Wallet — the technical baseline
- Where it runs
- Inside Pi Browser (iOS
1560911608, Androidpi.browser). Never a download of its own. - Address format
- 56 characters starting with
G. Muxed 69-characterMaddresses are live too. - Network identity
Pi Network,stellar-core 25.2.2, protocol 25 since 22 July 2026.- Fee and speed
- 0.01 π per operation, not per transaction (100,000 stroops) — a sampled twenty-operation transaction paid 0.2 π. Ledgers close about every 5 seconds.
- Privacy
- Effectively none. Pi's Horizon API is public, so any balance is readable by anyone with the address.
Custodial vs non-custodial, on the fingers
This decides who is able to lose your Pi, which is why two people with identical balances carry different risk.
Custodial
An exchange account is a bank holding your keys
PI on OKX, Kraken, Bitget or MEXC is a row in that company's database. They hold the keys; you hold a claim.
Buys you: password and 2FA resets, and a support queue that can sometimes fix a misdirected deposit.
Costs you: they can freeze the account, block your region, halt withdrawals, or fail outright.
Non-custodial
The Pi Wallet is a safe only you can open
The wallet generates a passphrase on your phone. That word list is the money. Nobody at Pi holds a copy, so no reset, no recovery, no appeal.
Buys you: no counterparty. Nobody freezes it, no insolvency touches it, no region-block applies.
Costs you: every mistake is final. Lose the passphrase and the balance is gone, not frozen; let someone read it and they drain you in one transaction.
Neither model is right in the abstract. The failure is holding a large mainnet balance while assuming an exchange-style safety net sits behind it. An exchange sells you a recovery process and charges counterparty risk for it — see our guide to buying and selling Pi Coin.
The passphrase is the asset
When you tap Generate Wallet, the secret is produced on the handset and, per Pi's documentation, never transmitted. It derives the keypair whose public half is your G… address.
Pi calls it "a 'password' made of a long string of words" and, in the wiki, a secret key "represented by a list of more legible words." Neither states a number. Twenty-four is the figure exchange help centres use, and Bitdefender's researchers recorded phishing pages demanding "the 24-word recovery phrase" — almost certainly right, but Pi has never published a count, so we will not call it official.
Now the part that costs money. The wallet is not derived from your Pi account. Account credentials govern app access; the passphrase governs the keys. Recovering a hijacked account does not recover the wallet, and losing the account does not by itself lose the Pi.
No reset flow, and the promised one never shipped
Pi's FAQ: "you may lose all of your Wallet's Pi if you lose this passphrase." Its support article: "you will lose access to the wallet and cannot recover the wallet due to the non-custodial nature of the Pi Wallet." Pi's wiki once described social recovery using part of your Security Circle, "released in a later version of the wallet." We found no evidence it exists. Write the words on paper — a screenshot syncs to a cloud account behind a reused password.
Setting up a Pi Coin wallet properly, including 2FA
The order matters, and step three is the one people postpone until it blocks a migration.
- Install both apps from the official stores only. Mining app: iOS
1445472541, Androidcom.blockchainvault. Pi Browser: iOS1560911608,pi.browser. Our Pi Network app download guide covers impostors. - Sign in to Pi Browser through the mining app, then open the wallet. Check for the purple navigation bar — Pi's safety post uses it as the visual tell.
- Tap Generate Wallet and write the passphrase on paper immediately. Two copies, two places. No photographs, no notes app, no email to yourself.
- Verify by signing back in from the copy you wrote, not the screen. A transcription error found today is an inconvenience; in two years, a total loss.
- Complete KYC at
kyc.pinet.com. Nothing migrates on-chain without it. - Enable wallet 2FA — step three of the Mainnet Checklist. Email-based, and mandatory before second migrations, which began rolling out on 26 March 2026.
- Send a small test transaction before moving anything meaningful. 0.01 π is cheap tuition.
- Treat lockups as a separate decision. Created under Lockups → Create New Lockup, irreversible once confirmed.
Be sober about 2FA. An attacker holding the passphrase can sign a transaction without seeing your inbox. Wallet 2FA is a control on Pi's migration workflow, not a lock on your funds.
Three balances, and only one of them is real
Pi shows three numbers, and conflating them is the commonest source of disappointment.
- Mobile balance. The big number in the mining app. It lives in Pi's database, not on a blockchain; Pi's FAQ states that unverified, unmigrated Pi is not transferable. It cannot be sent, sold or withdrawn.
- Transferable balance. The app's estimate of what can move on-chain. Pi's documentation calls it a "pessimistic estimate" and says the amount finally migrated can be higher. It grows as your Security Circle members pass KYC.
- Mainnet balance. Pi on the blockchain, controlled by your passphrase and spendable to Pioneers, ecosystem apps and exchanges that support real PI withdrawals. The only balance that exists in the sense that matters.
Reaching the third needs KYC plus a completed Mainnet Checklist. Once on-chain, Pi can be locked up: multipliers run from 0.1 for two weeks to 2 for three years, and Pi is explicit that "lockups cannot be reversed once confirmed." A higher mining rate on an asset down roughly 97% is arithmetic, not a gift; our Pi Coin price record has the figures.
Affiliate disclosure: the two buttons above open a third-party exchange in a new tab and are tagged nofollow sponsored. We may earn a commission at no extra cost to you. This is not the official Pi Network app, the official Pi Wallet, or an endorsement — and the PI instrument sold there is an IOU, not native mainnet Pi. Nothing here is financial advice.
Sending, receiving, fees and the memo problem
Mechanically it is simple: paste an address, add a memo if one is required, pay 0.01 π per operation, and the ledger closes in about five seconds. Every expensive failure lives in that middle clause.
A memo is not a protocol requirement on Pi — only 24 of 200 recent transactions we sampled carried one. What matters is the address the recipient issues. Kraken's support page is the clearest statement published anywhere: "If you use a muxed address, a Memo is not required… If you use a standard address, a Memo is required." OKX issues muxed M addresses and says no memo is needed; Bitget tells customers to copy both.
Two mistakes here are unrecoverable, not merely annoying
Wrong network. Kraken's own listing notice states that deposits made using other networks will be lost. Pi has no bridge, no wrapped version and no presence on Ethereum, BNB Chain or Solana.
Missing memo on a G-address. Your Pi lands in the venue's pooled account with nothing attributing it to you. Kraken again: "Missing or incorrect Memo data may result in delays, and in some cases the funds may be unrecoverable."
Never generalise: "Pi always needs a memo" and "Pi never needs a memo" are both wrong. Read the venue's own deposit page every time. Which venues support native withdrawals is covered on our Pi Coin exchange page.
Can you use MetaMask, Trust Wallet, Ledger or Trezor?
No — not one of them, and not through any workaround being advertised to you.
Pi is a layer-1 chain forked from stellar-core, not an EVM chain, and its addresses are 56-character ed25519 strkeys rather than 20-byte 0x… hex. MetaMask's non-EVM list includes neither Pi nor even Stellar, and adding a custom network needs a chain ID and an EVM JSON-RPC endpoint — there is no field for a network passphrase. Trust Wallet's asset repository enumerates 188 blockchains; Pi is not among them.
Hardware is the same. Ledger's crypto-asset service API returns 317 coins and networks with no Pi entry; Trezor's coin list has none, nor does its firmware derivation-path documentation. Pi does hold SLIP-0044 coin type 314159 — a namespace reservation, not firmware support. Neither vendor publishes an explicit denial, so this is a finding by absence from their own lists.
The Stellar look-alike trap
Because Pi forked Stellar's code, the same seed produces an identical 56-character G-address on both networks — while the balances sit on two unrelated ledgers. Sending XLM to "your Pi address" does not credit your Pi, and signatures cannot cross networks. Pi also has no contract address on any chain, so any Pi-branded token you can add to MetaMask is not Pi.
| Pi Wallet | Exchange account | "Pi-compatible" third-party wallet | |
|---|---|---|---|
| Holds the private key | You, alone | The exchange | Nobody — it cannot derive a Pi key |
| Holds native on-chain PI | Yes | Some Several PI markets are IOUs | No |
| Recovery if access is lost | None | Yes | n/a |
| On Pi's KYB list | Pi's own app | Seven exchanges, three on/off-ramps, two other services | Zero wallets |
| Failure mode | Passphrase lost or disclosed | Counterparty failure, or a non-withdrawable IOU | Outright theft |
Backup and recovery playbook: what to do if…
Decide these now, calmly, rather than in the moment.
…you lose your phone
Your Pi is fine if the passphrase is written down. Install Pi Browser on the replacement, sign in via the mining app, and choose the option to open an existing wallet — generating a new one creates a different address. If the passphrase lived only on that phone, treat it as compromised.
…you reinstalled the app and the wallet looks empty
That almost always means a freshly generated wallet, not a drained one. Paste your old G… address into the official explorer at blockexplorer.minepi.com. If the balance is there, nothing moved and you only need the right passphrase. If the address differs from the one you recorded, the original is still waiting for its own words.
…you think someone may have seen your passphrase
Act as if they have. A key cannot be rotated in place, so the only remedy is to move the funds: generate a new wallet on a device you trust and send the whole free balance there. Do it immediately, because on Pi a balance is public and an attacker with the words needs nothing else. Locked-up Pi cannot move until its term expires.
…you cannot find the passphrase at all
Search the paper in the drawer, an old password manager, an offline device backup. Then stop. No support ticket resolves this, and no third-party "Pi recovery service" is anything other than a second theft.
…you are holding a large mainnet balance
Assume you are on somebody's list: Pi's Horizon API is open, so anyone can enumerate balances — exactly how the December 2025 campaign chose targets. Split holdings across wallets, and never approve a request you did not initiate.
Scams that specifically target the Pi Coin wallet
Pi's published rule is the right first filter, and it is unusually blunt: "Do NOT interact with any website, app, or platform that asks you to input your Wallet Passphrase that is not EXACTLY 'wallet.pinet.com' in the Pi Browser." That post, dated 5 June 2025, is also the most recent dedicated Pi safety publication we could verify.
- Payment-request social engineering — the largest verified loss event. On 30 December 2025 the Core Team suspended the wallet's payment-request feature after more than 4.4 million π was drained, one attacker wallet taking over 838,000 π in December alone. Attackers scanned the public blockchain for large balances, then sent requests impersonating trusted contacts. Pi's position was that users lost funds only by approving them — so reject every payment request.
- Passphrase phishing. Cloned wallet interfaces, fake "validator" or "unlock your Pi early" sites, counterfeit KYC prompts. In September 2025 Pi moderators flagged a drainer address fed by fake anniversary-airdrop messages, and Pi deployed biometric and PIN authentication. No source names specific domains, so apply the
wallet.pinet.comrule instead of a blocklist. - Fake airdrops and inflated-value lures. Bitdefender documented over 140 Facebook ad variants in June 2025: fake wallet portals demanding a 24-word phrase to "claim 628 Pi", and fake mining installers offering a 31.4 π bonus while delivering malware. Related fabrications include a fictional "$310,000 per Pi" valuation.
- Fake wallet apps. Hanoi police stated in March 2025 that fake Pi Network applications exist and unlawfully collect user data. The defence is structural: no legitimate Pi wallet exists as an app-store download.
- Name-squat tokens. KuCoin hosts a page for "Pi Network DeFi", an unaffiliated BEP-20 token on BNB Smart Chain at
0x746760ecf1d8088c1014ef3d43dc45d5af8febf3; KuCoin's own page notes it is not listed there. Since Pi has no contract address, the contract address is the tell. - Hardware "integration" claims. No third-party wallet bridges a Ledger to Pi. Any prompt to import a Pi passphrase into a hardware ecosystem is theft.
The short version
Nobody legitimate will ever ask for your passphrase — not support, not a validator, not a migration helper, not an airdrop, not a hardware vendor. Every request is theft. Check the exact domain in Pi Browser before typing anything.
Verdict
The Pi Wallet does the job it claims. The keys are genuinely yours, the chain is auditable by anyone who cares to read it, and 0.01 π to settle in five seconds is a fair deal. The problems are not cryptographic. They are that the only backup is a word list most people never wrote down properly, and that a public ledger makes large holders easy to find.
Use the Pi Wallet in Pi Browser as the only place your mainnet Pi lives, and treat the passphrase on paper as the actual asset. Move Pi to an exchange when you intend to sell, not as storage, and read that venue's memo and network instructions first. There is no hardware option and no third-party wallet option — anything advertising one is mistaken or hunting for your words.
One closing note on method: we could not confirm the passphrase word count from any Pi source, we found no evidence that Security-Circle social recovery has shipped, and we found no documented "Pi doubling" scam despite how often that phrase circulates. Naming those gaps beats filling them with guesses.
Frequently asked questions
Where do I download the Pi Coin wallet?
You do not. There is no standalone Pi Wallet app on the App Store or Google Play. The wallet is a web app that runs inside Pi Browser, which is a separate app from the Pi mining app. Opening wallet.pinet.com in Chrome or Safari shows only a message telling you to download Pi Browser. Any product in an app store calling itself a Pi Wallet was not published by Pi Network.
Is the Pi Wallet derived from my Pi account?
No, and this is the custody fact people most often get wrong. Your Pi account — phone number or email, password, account 2FA — controls access to the apps. The wallet passphrase controls the keys, and it is generated separately on the device. Recovering your Pi account does not recover your wallet, and losing your account does not by itself lose your Pi.
How many words is the Pi Wallet passphrase?
Pi Network's own documentation describes it only as "a long string of words" and never publishes a count. Twenty-four is what exchange help centres, wallet guides and even the phishing pages observed by Bitdefender consistently use, so 24 words is very likely correct — but treat it as widely reported rather than officially confirmed. Either way, the exact length matters far less than never typing it anywhere but the real wallet.
Do I need a memo when I send Pi to an exchange?
It depends on the address the exchange gives you. If the deposit address starts with G, a memo is normally required, because the venue is pooling deposits and the memo is the only thing attributing yours to you. If it starts with M — a muxed address — the routing ID is inside the address and no memo is needed. Kraken states both cases explicitly; OKX issues M-addresses; Bitget instructs users to copy a memo. Follow the specific venue's page every time.
Can I keep Pi Coin on a Ledger or Trezor?
No. We queried Ledger's own crypto-asset service, which returns 317 supported coins and networks with no Pi entry, and checked Trezor's supported-coin list and firmware derivation-path documentation, which contain none either. Pi holds SLIP-0044 coin type 314159, but a registry reservation is not device support. Any post offering to "secure your Pi on hardware" by importing the passphrase is a theft attempt.
What happens to my Pi if I lose my phone?
Nothing, provided you still have the passphrase written down somewhere. Install Pi Browser on the new device, open the wallet and use the sign-in flow that asks for the passphrase rather than generating a new wallet. The keys were never on the phone in any recoverable-by-Pi sense; they were derived from those words. Without the words, the mainnet balance is unreachable by anyone, including Pi Network.
Why did Pi suspend wallet payment requests?
On 30 December 2025 the Core Team disabled the payment-request feature after a social-engineering campaign drained more than 4.4 million π, with one attacker wallet taking over 838,000 π that month alone. Attackers scanned Pi's public blockchain for large balances, then sent requests impersonating trusted contacts. Pi's position was that no protocol flaw was involved: users approved the transfers themselves.
Does wallet 2FA protect my passphrase?
No. Email-based wallet two-factor authentication, step three of the Mainnet Checklist, guards the migration process and is required before second migrations. It does not stand between an attacker and your keys. If someone has the passphrase they can construct and sign a transaction without ever touching your email. 2FA is a migration control, not a recovery mechanism and not a lock on your funds.