> ## Documentation Index
> Fetch the complete documentation index at: https://docs.jup.ag/llms.txt
> Use this file to discover all available pages before exploring further.

# Jupiter Wallet Security

> Jupiter Wallet security: self-custody, password and locking, biometric unlock, key export, and Transaction Protection against malicious browser extensions.

## Self-custody

Jupiter Wallet is fully self-custodial (only you control your keys and funds). Your private keys and recovery data are stored only on your device. Jupiter never stores, accesses, or transmits your keys.

You are solely responsible for securing your recovery phrase, private keys, and social login credentials.

***

## Password

<Tabs>
  <Tab title="Change password">
    Open the wallet → **three-dot menu** (top right) → **Settings** → **Change Password**.

    Enter your current password, set a new one, and confirm.
  </Tab>

  <Tab title="Forgot password">
    On the login screen, select **Forgot Password**. This resets the extension and starts a fresh session.

    You will need to re-import your wallets using your recovery phrase, private key, or social login.

    <Warning>
      Resetting the extension does not delete your wallets on-chain. Your funds remain safe as long as you have your recovery phrase or private key. Without either, you will permanently lose access.
    </Warning>
  </Tab>
</Tabs>

***

## Locking the wallet

The extension stays active while your browser is open. There is no logout function. Instead, you can **lock** the wallet to secure your session.

<CardGroup cols={2}>
  <Card title="Manual lock" icon="lock">
    **Three-dot menu** (top right) → **Lock Wallet**. Password required to unlock.
  </Card>

  <Card title="Auto-lock" icon="timer">
    **Three-dot menu** → **Settings** → **Auto Lock Time**. Choose how long the wallet stays unlocked, or **Never**.
  </Card>
</CardGroup>

***

## Biometric unlock

**Settings** → **Security** → **Biometric Unlock** lets you unlock the wallet with your device's biometrics instead of typing your password. Disabled by default.

***

## Exporting keys

From the wallet list, open the **three-dot menu** next to any wallet → **Export Key/Seed**.

| Wallet type               | Exported data                                                                      |
| ------------------------- | ---------------------------------------------------------------------------------- |
| Created in Jupiter Wallet | Private key + seed phrase                                                          |
| Imported wallet           | Private key only                                                                   |
| Social login              | No in-extension export — see [below](#exporting-a-social-login-wallet-private-key) |

<Warning>
  Your private key and seed phrase give full control over your wallet. Never share them. Store them offline in a secure location.
</Warning>

### Exporting a social login wallet private key

Social login wallets (Social Login / Jupiter ID) have no seed phrase and no export option inside the extension. Instead, export the private key through the Jupiter website:

<Steps>
  <Step title="Open jup.ag">
    Visit [jup.ag](https://jup.ag) and open the wallet connect menu.
  </Step>

  <Step title="Connect via Social Login">
    Select **View More Wallets** → **Jupiter ID** (Email or Social Login), and sign in with the same method you used to create the wallet.
  </Step>

  <Step title="Export the private key">
    Once connected, click your wallet address in the top right to open the mini-portfolio, then click the **key icon** (between Send and Disconnect) to retrieve your private key.
  </Step>
</Steps>

This is the same flow as [Quick Accounts on Jupiter Mobile](/user-docs/global/mobile/managing-wallets#exporting-your-quick-account-private-key).

<Danger>
  If you lose access to your social login method, you also lose the only way to retrieve this wallet's private key. Jupiter cannot recover it for you.
</Danger>

***

## Transaction Protection

Jupiter Wallet includes built-in protection against malicious browser extensions that inject hidden fees or transfers into transactions.

When a transaction includes a transfer to a known malicious address, the wallet automatically detects and filters it out before the transaction is submitted. This protection works on all websites, not only jup.ag.

<Note>
  If you intentionally initiate a transfer to one of these addresses from within the wallet (e.g. via Send), the transaction is not filtered.
</Note>

***

## Verifying the official extension

Install Jupiter Wallet only from the [Chrome Web Store](https://chromewebstore.google.com/detail/jupiter-wallet/iledlaeogohbilgbfhmbgkgmpplbfboh), published by **[extension@jup.ag](mailto:extension@jup.ag)**. See [Installation](/user-docs/manage/extension-wallet/getting-started#installation).

<Note>
  Security questions? See the [Jupiter Wallet FAQ](/user-docs/manage/extension-wallet/faq#security).
</Note>