Clench Wallet
Secure non-custodial Bitcoin wallet with multisig support
新版本 0.3.29
Require fresh Android authentication to disable seed/send protections. Reject repeated multisig key material in new policies; warn without changing existing wallets. Harden signing sessions, backup identifiers, QR frames and Electrum input handling. Add explicit signature-collection restart. Update SQLCipher with tested database/WAL upgrade handling. Strengthen signing-secret scope and native dependency checks. Physical-device validation remains outstanding; see release notes for evidence limits
Clench is a Bitcoin-only, non-custodial Bitcoin wallet for Android. It uses Bitcoin Dev Kit and stores wallet data locally on the device.
Wallet features:
- Create single-sig and multisig wallets.
- Import watch-only wallets from descriptors.
- Create or restore BIP-39 seed phrase wallets with an optional passphrase.
- Use native SegWit, nested SegWit, legacy, and Taproot script types.
- Connect to Electrum servers, including personal servers and Tor SOCKS5 routes.
- Use coin control, UTXO freezing, labels, batch payments, RBF fee bumping, CPFP, cancel replacement attempts, raw transaction import, and sweep flows.
- Run node diagnostics for Electrum route, Tor mode, TLS pinning, server version, and tip height.
Hardware-wallet features:
- Exchange PSBTs by animated QR, BBQr, an intentional NFC tap, microSD/user-selected file import, or signed-return import where supported.
- Clench does not communicate with signing devices over USB or Bluetooth. A signer may still use USB for power.
- Work with QR-based signers such as SeedSigner, Keystone, Foundation Passport, and Blockstream Jade. v0.3.28 adds physically unverified protocol presets intended for OneKey Pro, Krux, and Specter DIY; the Krux and Specter DIY presets also include user-selected microSD/file transfer.
- Work with Coldcard Q, Coldcard Mk4, and Coldcard Mk5 transfer paths.
- Check TAPSIGNER NFC Tap Protocol status.
- Sweep SATSCARD active slots with certificate verification and explicit CVC-authenticated unseal confirmation.
- Set up, verify, import, and back up TAPSIGNER cards, and directly sign supported single-signature BIP84 native-SegWit or standard BIP48 native-P2WSH multisig inputs with complete in-app review and returned-signature verification.
- TAPSIGNER payment signing does not support Taproot, legacy, nested SegWit, nonstandard P2WSH, other account paths, or PIN change.
- The OneKey Pro, Krux, Specter DIY, and TAPSIGNER multisig paths have automated coverage but no recorded physical-device acceptance; no model/firmware compatibility claim is made for those new paths.
- Require explicit broadcast confirmation after hardware-wallet signing.
Security and privacy features:
- Encrypt keys with Android Keystore.
- Encrypt the Room application database with SQLCipher. BDK public wallet-state files rely on the Android app sandbox and device encryption.
- Protect wallet access with PIN and biometric authentication where available.
- Validate signed PSBTs and finalized transactions before broadcast.
- Avoid analytics, advertising SDKs, Firebase, Google Play Services, crash reporting services, and account sign-in.
Network use is limited to wallet sync and optional user-triggered fee or price data lookups.
Clench is free software under the MIT License.
Wallet features:
- Create single-sig and multisig wallets.
- Import watch-only wallets from descriptors.
- Create or restore BIP-39 seed phrase wallets with an optional passphrase.
- Use native SegWit, nested SegWit, legacy, and Taproot script types.
- Connect to Electrum servers, including personal servers and Tor SOCKS5 routes.
- Use coin control, UTXO freezing, labels, batch payments, RBF fee bumping, CPFP, cancel replacement attempts, raw transaction import, and sweep flows.
- Run node diagnostics for Electrum route, Tor mode, TLS pinning, server version, and tip height.
Hardware-wallet features:
- Exchange PSBTs by animated QR, BBQr, an intentional NFC tap, microSD/user-selected file import, or signed-return import where supported.
- Clench does not communicate with signing devices over USB or Bluetooth. A signer may still use USB for power.
- Work with QR-based signers such as SeedSigner, Keystone, Foundation Passport, and Blockstream Jade. v0.3.28 adds physically unverified protocol presets intended for OneKey Pro, Krux, and Specter DIY; the Krux and Specter DIY presets also include user-selected microSD/file transfer.
- Work with Coldcard Q, Coldcard Mk4, and Coldcard Mk5 transfer paths.
- Check TAPSIGNER NFC Tap Protocol status.
- Sweep SATSCARD active slots with certificate verification and explicit CVC-authenticated unseal confirmation.
- Set up, verify, import, and back up TAPSIGNER cards, and directly sign supported single-signature BIP84 native-SegWit or standard BIP48 native-P2WSH multisig inputs with complete in-app review and returned-signature verification.
- TAPSIGNER payment signing does not support Taproot, legacy, nested SegWit, nonstandard P2WSH, other account paths, or PIN change.
- The OneKey Pro, Krux, Specter DIY, and TAPSIGNER multisig paths have automated coverage but no recorded physical-device acceptance; no model/firmware compatibility claim is made for those new paths.
- Require explicit broadcast confirmation after hardware-wallet signing.
Security and privacy features:
- Encrypt keys with Android Keystore.
- Encrypt the Room application database with SQLCipher. BDK public wallet-state files rely on the Android app sandbox and device encryption.
- Protect wallet access with PIN and biometric authentication where available.
- Validate signed PSBTs and finalized transactions before broadcast.
- Avoid analytics, advertising SDKs, Firebase, Google Play Services, crash reporting services, and account sign-in.
Network use is limited to wallet sync and optional user-triggered fee or price data lookups.
Clench is free software under the MIT License.
- 作者: Clench Wallet
- 许可: MIT License
- 网站
- 问题跟踪系统
- 源代码
- 更新日志
- 构建元数据
- 可重复性状态
版本
尽管下面提供了 APK 安装包的下载选项，但你应该注意，以这种方式安装将不会收到更新通知，这是一种不太安全的下载方式。 我们建议你安装使用 F-Droid 客户端。
下载 F-Droid-
arm64-v8aarmeabi-v7ax86_64该版本需要 Android 8.0 及以上版本。
此包由原始开发者构建并签名，并保证对应于此源代码 tarball。
-
arm64-v8aarmeabi-v7ax86_64该版本需要 Android 8.0 及以上版本。
此包由原始开发者构建并签名，并保证对应于此源代码 tarball。
-
arm64-v8aarmeabi-v7ax86_64该版本需要 Android 8.0 及以上版本。
此包由原始开发者构建并签名，并保证对应于此源代码 tarball。
新版本 0.3.28
Adds unverified air-gapped protocol presets intended for OneKey Pro, Krux, and Specter DIY, plus TAPSIGNER BIP48 native-P2WSH multisig signing, legacy UR, ur:psbt, ur:bytes, and Base43 imports. Fixes the persisted TAPSIGNER settings label. New device/multisig paths have automated coverage; physical acceptance is NOT RUN.
新版本 0.3.27
Adds direct TAPSIGNER signing for single-signature BIP84 native-SegWit payments, with complete review, returned-signature verification, and explicit broadcast. Improves real-card CBOR, derive, network, and xpub compatibility; adds numeric-first PIN entry with a legacy fallback. Also upgrades to BDK Android 3.0 with persisted-wallet migration proof, verifies Room/SQLCipher on Android, and updates the Android/Kotlin toolchain.