Trust: Crypto & Bitcoin Wallet

Trust Wallet Review: Your Keys on 100+ Chains, but No Reset for a Lost Phrase

Gas, 8 on-ramp partners and a swap fee official pages disagree on

With no subscription or in-app purchase in either store, every cost lands per transaction. Gas goes to the blockchain, in its native coin or, through FlexGas, in USDT, USDC or TWT on five EVM networks. Card and bank purchases run through eight partners such as MoonPay, Ramp and Transak, which price each order in real time; most start around $10. On swaps, the help center says no service fee is added, yet an August 2026 campaign waives the Trust Wallet swap fee on stablecoin pairs outside Ethereum, and the terms allow a revenue share from partner fees. MetaMask states a flat 0.875%. Check current fees in the app.

12 words, no reset: Manual Backup versus Encrypted Cloud Backup

The wallet is the recovery phrase: 12 words in a fixed order, created on the device and never stored by the developer, which says it cannot help anyone regain access. Setup does not force a backup, so funds can arrive before the words are written down. Manual Backup, in the three-dot menu beside the wallet name, reveals them after a PIN, and the app blocks screenshots. The optional Encrypted Cloud Backup keeps an encrypted copy in your iCloud or Google Drive, behind a password the company cannot reset either. Swift, a passkey wallet without a phrase launched in February 2024, is closed to new users. The Coinbase exchange app, by contrast, holds coins in a custodial account.

Two Chrome extension breaches, 2022 and 2025, and the Security Scanner

Both public incidents hit the Chrome extension, and the developer said mobile-only users were unaffected each time. In November 2022 a WebAssembly flaw in address generation cost users about $170,000, The Block reported, and refunds were offered. On December 24–26, 2025, an attacker used a leaked Chrome Web Store key, which the company links to the Sha1-Hulud supply-chain attack, to publish a malicious version 2.68. The company counted 2,520 drained addresses, tied about $8.5 million to the attacker's wallets and reimburses claims that pass ID and KYC checks. In the app, the Security Scanner simulates transactions on supported networks and flags known drainer contracts, but brand-new ones and some off-chain signatures can slip past.

September 15, 2026: 24 networks dropped, and what the data labels say

On September 15, 2026, the network list lost 24 chains, among them Nano, MultiversX, Moonbeam and Decred; Trust Handles, readable names stored on the FIO network, stopped working on September 7. Coins stay on their blockchains, and EVM chains can be re-added as custom networks, but non-EVM ones need the phrase imported into another wallet. Google Play's data label declares nothing shared with third parties and lists app interactions, crash logs and device IDs; Apple's lists only diagnostics not linked to you. The privacy notice says no email is collected to run a wallet and requires users to be 18, older than both store ratings. Disputes go to individual arbitration in Hong Kong.