Keys never leave
Internet Identity holds the key inside your device's secure hardware; your browser signs. The Klenba canister holds no key material at all — so there is nothing on our side to lose, leak, subpoena, or sell.
Self-custody, engraved on-chain
Your assets.
Your assets.
Your keys.
Your vault.
Klenba is a self-custody vault on the Internet Computer. Internet Identity signs every move in your browser — your keys never leave it, and no server between you and your money can ever spend it. ICP and every ICRC token, one serene view.
- Passwords
- 0
- Custodians
- 0
- Vaults
- ∞
- On-chain
- 100%
I. Custody
Three promises the code keeps.
Custody is not a policy you read — it is a property you can verify. These three are enforced by the shape of the system, not by our good intentions.
Nothing can spend for you
No transfer and no withdrawal method exists on-chain. Every movement is authorised by you, in the moment, against a screen that shows exactly what leaves and where it lands — principal, subaccount, fee, memo.
Honest states, always
If a balance cannot be refreshed, Klenba says so — never a silent zero. Every send can be exported as a receipt. A vault should tell the truth even when the truth is inconvenient.
“A vault is not a place that holds your money. It is a place that holds your authority.”
The Klenba principle
II. Structure
One identity. As many vaults as you need.
Every purpose gets its own address and its own history — under a single Internet Identity. No new logins, no new seeds, no commingled chaos.
Primary
251.23456789 ICP
Everyday custody · send, receive, receipts
Treasury
12,345 ICP
Project funds · watched, never commingled
Savings
80 ICP
Long horizon · cold by habit
Your next vault
— ICP
Named in seconds · copied as a QR · deleted when done
- Unlimited labeled subaccounts
- QR, account ID, principal or BTC address
- Downloadable receipts
- ICP · ICRC · ckBTC to native Bitcoin
Where should your ICP actually live?
Three common homes, judged on one question: who can move your money?
| Question | Exchange account | Browser extension | Klenba |
|---|---|---|---|
| Who holds the key? | The exchange | You, on one device | You, in Internet Identity |
| Can the provider move funds? | Yes | No | No — no such endpoint exists |
| Withdrawal limits | Their schedule | None | None |
| Named vaults & history | One balance | One account | Unlimited, labeled, per-vault |
| Survives the provider vanishing? | No | Only with your phrase | Yes — vaults live on-chain |
III. Assets
Everything on the Internet Computer. Plus Bitcoin.
Klenba speaks the open standards of the IC, so the assets you already hold simply appear — no listing process, no gatekeeper.
Internet Computer
The native token, sent as legacy account-ID transfers or as ICRC-1 to a principal. Gas is transparent and shown before you sign.
Chain-key Bitcoin
Hold Bitcoin on-chain, and withdraw straight to a native BTC address. Deposit detection reads the Bitcoin network through the minter.
Chain-key Ethereum
Ethereum's value, settled on the IC. Add it once and it sits beside the rest of your vault.
Any ICRC token
SNS tokens, community tokens, project tokens — if it speaks ICRC-1, paste the canister and it lives in your vault with live balances.
Ecosystem tokens
Tokens from the wider ecosystem — including $DEEP from DYVR — belong here, in a vault you control rather than an exchange you trust.
Whatever comes next
The IC ships new standards constantly. Klenba adds assets by canister, so the vault grows with the network instead of waiting for a release.
IV. Security
What Klenba cannot do is the point.
Most security pages list features. Ours lists impossibilities — the things the architecture forbids, which is a stronger guarantee than a promise.
- Cannot move your funds. No transfer or withdrawal method exists on the Klenba canister. It cannot sign, cannot send, cannot approve.
- Cannot see your key. Keys are created and held by Internet Identity in your device's secure hardware. We never receive them.
- Cannot fake a balance. Numbers come from the ledgers. When a read fails, you get an honest amber state — not a comforting zero.
- Cannot rewrite history. Vault labels and history live on-chain; receipts you export are yours to keep and verify.
On-chain, in the open
Verify, don't trust
Klenba runs as canisters on the Internet Computer. That means the rules above are inspectable, the balances are public, and the code cannot quietly change behaviour between one visit and the next.
- Balances read live from ICP and ICRC ledgers
- Vault accounts derived from your principal — standard derivations
- Internet Identity delegation, scoped to this origin
- No email, no phone number, no account to recover
V. Ritual
Three steps. No ceremony.
There is no onboarding funnel, no KYC queue, no waitlist. The vault exists the first time you arrive.
- 01
Sign in
One tap with Internet Identity — a passkey, not a password. Your vault is created in that moment, derived from your principal.
- 02
Name your vaults
Split savings from treasury, projects from cold storage. Each vault gets its own address, its own history, its own QR.
- 03
Hold, send, prove
Balances refresh from the ledgers; every send produces a receipt you can keep, export, and hand to anyone who asks.
VI. Roadmap
Promises kept in order.
No vapour, no overclaiming. Here is what shipped in the refresh, and what comes next — with the sequence we intend to keep.
Shipped01
The refresh
Cream-and-ink rebuild, the mask in three colorways, honest balance states, receipts under the Klenba name, and a vaults-first layout that scales from phone to TV.
Next02
Ledger-backed history
Inbound transfers and finality states read from the ledgers themselves — so Activity shows everything that happened, not only what you sent.
Next03
Cycles command centre
Convert ICP to cycles and top up canisters without leaving the vault — the natural home for the ecosystem's cycle economy.
Later04
Team vaults
Read-only shared views first, threshold signing next. Multi-signer custody that keeps the promise the architecture already makes.
VII. Questions
Asked plainly, answered plainly.
Can Klenba move my money?
No. The Klenba canister has no transfer or withdrawal method and holds no keys. It stores your vault labels, contacts and history; every movement is signed in your browser by Internet Identity and sent straight to the ledger — ICP and ICRC alike.
What happens if Klenba disappears?
Your vaults are standard ICP accounts derived from your principal, so they exist on the Internet Computer rather than inside Klenba. Any wallet that accepts your principal and subaccount reaches the same balances. Losing Klenba costs you the interface, not the assets.
Which assets can I hold?
ICP and any ICRC-1 token — including chain-key Bitcoin and Ethereum — plus withdrawal of ckBTC to a native Bitcoin address and deposit tracking from the Bitcoin network. New tokens are added by canister ID, so the vault grows with the ecosystem.
Why do I need Internet Identity?
It is the passkey service of the Internet Computer: no password, no seed phrase to photograph, and no shared secret for anyone to phish. Your key stays in your device's secure hardware and never travels to us.
What does it cost?
Klenba charges no subscription and takes no cut of your transfers. You pay only what the network charges — ledger fees on sends, and the cycles that keep canisters alive. The interface is free.
Is my activity private?
The Internet Computer is a public network: balances at an address are visible to anyone who knows the address, exactly as with any on-chain system. Klenba adds no tracking, no analytics profile and no email to sell — and holds no personal data to leak.
Do you support teams today?
Vaults are per-identity today, which suits individuals and solo operators. Team vaults — read-only sharing first, then threshold signing — are on the roadmap and deliberately not promised before they exist.
How do I get help?
Write to hello@klenba.com. Because there are no accounts, there is nothing to lock you out of while we reply — your vault stays reachable the whole time.
Open
Your vault is waiting.
No setup. No seed ceremony. No custodian. Sign in and it is already there — with the mask you chose, in the theme you prefer.
Self-custody means exactly that: you hold the keys, and you hold the responsibility.