Parity Signer (mobile + desktop)

What Is Parity Signer (mobile + desktop)?

Parity Signer (mobile + desktop) refers to the air-gapped crypto signing setup that uses the former Parity Signer mobile app, now rebranded as Polkadot Vault, together with a desktop interface that prepares transactions and scans signed QR codes.

In simple terms, the mobile device stores private keys offline, while the desktop device connects to the internet and prepares transactions.

The two devices communicate through QR codes instead of USB, Bluetooth, Wi-Fi, or mobile data.

This setup is designed to keep private keys away from internet-connected devices while still allowing users to sign crypto transactions.

The Polkadot Wiki states that Polkadot Vault is the rebranded version of Parity Signer and is an air-gapped cold storage solution for Polkadot, Kusama, and other Substrate-based chains.

The Polkadot Vault GitHub repository explains that the app allows a smartphone to act as an air-gapped crypto wallet, also known as cold storage.

The phrase “mobile + desktop” is important because Parity Signer itself is mainly a mobile signing app, not a normal desktop wallet.

The desktop side is usually a compatible browser interface, wallet extension, developer signer, or application that can display transaction QR codes and scan signed responses.

The mobile side holds the keys and signs after the user reviews the transaction details.

The desktop side broadcasts the signed transaction to the blockchain network.

This split is the core security idea behind Parity Signer.

Key Takeaways About Parity Signer (mobile + desktop)

• • Parity Signer has been rebranded as Polkadot Vault.
  • The signing app is mainly mobile and is available for iOS and Android devices.
  • The desktop side is usually a compatible interface that prepares transactions and scans signed QR codes.
  • The setup is air-gapped because private keys stay on an offline device.
  • Transactions are passed between mobile and desktop devices through QR codes.
  • Users must keep chain metadata updated so the offline signer can decode transaction details correctly.
  • Parity Signer is mainly used for Polkadot, Kusama, and Substrate-based networks.
  • The main risks include wrong metadata, fake QR codes, unsafe installation, seed phrase exposure, device compromise, and user mistakes.

Why Parity Signer Was Created

Parity Signer was created to give crypto users a way to turn an unused smartphone into a cold signing device.

Many users want the security benefits of cold storage without buying a separate hardware wallet.

An old phone can become useful for this purpose if it is factory reset, kept offline, and used only for signing.

The old Parity Signer concept was simple but powerful.

The phone holds the private keys.

The computer or online device prepares the unsigned transaction.

The phone scans the unsigned transaction as a QR code.

The user reviews the details on the phone.

The phone signs the transaction offline.

The computer scans the signed transaction from the phone and broadcasts it.

This workflow reduces the chance that private keys touch an online machine.

The Google Play listing describes Polkadot Vault as an app that turns an Android device into a cold-storage wallet for Polkadot, Kusama, and other Substrate-based networks.

The Apple App Store listing describes the iOS version in the same cold-storage context.

Parity Signer vs Polkadot Vault

Parity Signer and Polkadot Vault are closely related because Polkadot Vault is the current name of the former Parity Signer app.

Many older guides, wallet interfaces, and community posts still use the name Parity Signer.

Many current official materials use the name Polkadot Vault.

The Polkadot Wiki explains that the Parity Signer rebranding to Polkadot Vault is live on iOS and Android devices.

This means users may see both names depending on the guide, app store page, wallet interface, or version.

For SEO and search intent, both names matter because users may search for the old name while needing the current app.

For security, the current name matters because users should avoid downloading random old files from untrusted sources.

Users should use official app stores, official documentation, or verified GitHub releases when installing or updating the app.

Old versions may lack newer safety features, metadata support, or network compatibility.

The safest approach is to treat “Parity Signer” as the legacy name and “Polkadot Vault” as the current product name.

How the Mobile Side Works

The mobile side is the offline signing device.

A user installs the app on a dedicated iOS or Android device.

The device should be factory reset before use.

After installation, the device should be put into airplane mode and kept disconnected from the internet.

The app can generate or restore accounts and store private keys locally on the device.

The app can display account QR codes so a desktop interface can attach the account as an external signer.

The app can scan unsigned transaction QR codes from the desktop device.

The app can decode transaction details if it has the correct chain metadata.

The app can then sign the transaction and display a signed QR code.

The private key does not need to leave the mobile device during this process.

This is why the mobile device acts like a hardware signer.

It is not a normal hot wallet because it should not browse websites, connect to dApps, or stay online.

How the Desktop Side Works

The desktop side is the online device that interacts with blockchain applications.

It may be a browser-based account interface, developer interface, wallet extension, or compatible desktop application.

The desktop side does not need to hold the private key.

Instead, it attaches the account as an external QR signer.

When the user wants to send funds, stake, vote, or sign another transaction, the desktop interface prepares an unsigned transaction.

The desktop screen displays that unsigned transaction as a QR code.

The mobile signer scans the QR code and shows the transaction details for review.

After signing, the mobile app displays a signed QR code.

The desktop camera scans that signed QR code and broadcasts the transaction to the network.

Polkadot Support’s guide on adding a Parity Signer account on the Polkadot Developer Interface describes attaching an external QR-signer account through a desktop browser flow.

This is why “mobile + desktop” describes the full working setup better than “mobile app” alone.

Why QR Codes Are Used

QR codes are used because they allow data transfer without a network connection between devices.

The desktop device can show an unsigned transaction as a QR code.

The offline phone can scan that QR code with its camera.

The offline phone can show the signed result as another QR code.

The desktop device can scan that signed result and broadcast it.

This avoids connecting the signing phone by cable or wireless networking.

That matters because physical and wireless connections can create attack paths.

QR transfer is not magic, but it reduces the need for direct device connectivity.

Users should still verify what the QR code represents before signing.

A malicious desktop device can still try to show a harmful transaction QR code.

The offline signer helps by decoding and displaying transaction details, but only if metadata is correct and the user reads the screen carefully.

Why Metadata Matters

Metadata is one of the most important parts of using Parity Signer safely with Substrate-based chains.

Substrate chains can upgrade their runtime, which changes how transactions should be decoded and displayed.

If the signer has outdated metadata, it may not show transaction details correctly.

This can make signing riskier because the user may not fully understand what they are approving.

The Polkadot Wiki says Polkadot Vault allows users to securely sign extrinsics through QR codes and supports metadata updates through QR code fountains.

A metadata QR fountain is a multi-part QR process used to transfer larger metadata data to the offline device.

The user scans the metadata from a trusted source, and the signer updates its local understanding of the chain.

Metadata should come from trusted documentation, a trusted metadata portal, or a source the user can verify.

Hydration’s guide on using Polkadot Vault with desktop applications warns users to make sure they scan QR codes signed by a trusted verifier.

This warning is important because metadata affects what the signer displays.

Bad metadata can reduce the value of offline signing by making transaction review unreliable.

Is Parity Signer a Wallet?

Parity Signer is often called a wallet, but the Polkadot Wiki makes an important distinction.

The Wiki says Polkadot Vault is not technically a wallet because it does not transfer funds by itself.

It is more like a keychain tool that creates, manages, restores, and signs accounts.

This distinction helps users understand its role.

A normal wallet may connect to the internet, show balances, build transactions, interact with dApps, and broadcast transactions.

Parity Signer focuses on key storage and offline signing.

The online desktop interface handles transaction building and broadcasting.

The signer handles private key protection and approval.

This separation can improve security because the most sensitive part of the process stays offline.

It also increases complexity because users need to understand both devices and the QR workflow.

Supported Networks

Parity Signer is mainly associated with Polkadot, Kusama, and Substrate-based networks.

The Polkadot Vault GitHub repository states that the mobile app can be used to store Substrate accounts, including Polkadot and Kusama accounts.

The app store listings also describe support for Polkadot, Kusama, and other Substrate-based networks and parachains.

Support for a chain does not always mean the user can safely sign everything without preparation.

The signer may need chain specifications and current metadata before it can decode transactions correctly.

For default networks, the setup may be easier.

For additional parachains or custom Substrate networks, users may need to add chain specs and metadata through QR codes.

Users should confirm network support before sending funds to an account they expect to manage with Parity Signer.

They should also confirm that their desktop interface can work with external QR signers for that network.

Compatibility is a full workflow question, not only an app installation question.

Parity Signer and Cold Storage

Cold storage means private keys are kept away from internet-connected devices.

Parity Signer uses a dedicated offline smartphone as the cold signing device.

This can protect against many online threats because malware on the desktop cannot directly read the private key from the phone.

However, cold storage does not remove every risk.

A user can still lose the recovery phrase.

A user can still sign a malicious transaction after failing to review details.

A user can still install a fake app.

A user can still scan malicious metadata or an untrusted QR code.

A user can still fail to maintain backups.

Cold storage protects keys from internet exposure, but it does not replace careful user behavior.

The app is strongest when used on a dedicated device that is clean, offline, and not used for everyday activity.

Mobile Setup Best Practices

Use a dedicated phone that will not be used for normal browsing, messaging, or app activity.

Factory reset the device before installing the signing app.

Install the app only from trusted official sources.

After installation, disconnect the phone from the internet.

Enable airplane mode and keep Wi-Fi, Bluetooth, and mobile data off.

Consider physically removing SIM cards when possible.

Do not install unrelated apps on the signer device.

Write down the recovery phrase offline and store it securely.

Never photograph, upload, or type the recovery phrase into an internet-connected device.

Keep the signer device physically safe.

Test the setup with a small amount before using it for meaningful funds.

Desktop Setup Best Practices

Use a trusted desktop interface that supports external QR signers.

Keep the desktop operating system and browser updated.

Allow camera access only to the specific signing interface when needed.

Verify that the account attached on the desktop matches the account shown on the offline signer.

Check the network before preparing a transaction.

Use trusted sources for chain metadata and chain specifications.

Read every transaction detail displayed on the offline device before signing.

Do not approve a transaction only because the desktop screen looks familiar.

Assume the online desktop could be compromised and use the offline signer screen as an independent review point.

Do not keep the recovery phrase on the desktop.

Do not use the same computer for high-risk downloads and critical crypto signing workflows.

Signing a Transaction With Mobile and Desktop

The user first prepares a transaction on the desktop interface.

The desktop interface displays the unsigned transaction as a QR code.

The user opens the scanner in the mobile signer app.

The mobile signer scans the QR code from the desktop screen.

The mobile signer decodes and displays the transaction details.

The user checks the destination, network, amount, fees, call type, and any special instructions.

If the details are correct, the user unlocks the key and signs on the mobile device.

The mobile device displays a signed QR code.

The desktop interface scans the signed QR code using the desktop camera.

The desktop interface submits the signed transaction to the blockchain network.

Polkadot Support’s guide to signing a transaction with Parity Signer describes this QR-based workflow between the signer app and the desktop interface.

This process keeps the private key on the mobile device while still allowing the transaction to be broadcast from an online machine.

Security Benefits

The first major benefit is private key isolation.

The private key stays on the offline mobile device instead of being stored on the online desktop.

The second benefit is reduced attack surface.

The signer device does not need to browse websites, connect to dApps, or run many apps.

The third benefit is visual transaction review.

The user can review the transaction on the offline device before signing.

The fourth benefit is QR-based data transfer.

Data moves through camera scanning rather than direct device networking.

The fifth benefit is cost efficiency.

An unused phone can become a cold signing device instead of becoming electronic waste.

The sixth benefit is compatibility with Substrate-based account models.

Users can manage Polkadot, Kusama, and supported parachain accounts through a dedicated signing workflow.

These benefits make Parity Signer useful for long-term holders, validators, nominators, governance voters, DAO participants, and power users who care about cold signing.

Security Risks

The first major risk is downloading a fake or outdated app.

Users should use official sources and verify release information when possible.

The second risk is seed phrase exposure.

If the recovery phrase is typed into an online device, photographed, or stored in the cloud, the cold-storage benefit may be lost.

The third risk is wrong metadata.

If the signer cannot decode a transaction correctly, the user may approve something without understanding it.

The fourth risk is malicious QR data.

An online device can display a QR code for a transaction the user did not intend.

The fifth risk is careless signing.

Air-gapped signing only helps if the user checks what is being signed.

The sixth risk is device theft or damage.

A lost signer device can be restored with the recovery phrase, but only if the phrase is backed up safely.

The seventh risk is old-device insecurity.

Very old phones may lack modern security updates or support only older app versions.

The eighth risk is recovery mistakes.

If the user loses both the device and recovery phrase, the funds may be permanently lost.

Parity Signer vs Hardware Wallet

Parity Signer can act like a hardware wallet because it keeps private keys offline and signs transactions on a separate device.

However, it is not the same as a purpose-built hardware wallet.

A hardware wallet is designed from the start for secure key storage and transaction signing.

Parity Signer uses a general-purpose smartphone that has been repurposed as an offline signing device.

This can be convenient and cost-effective, but it also depends on the phone’s operating system, physical condition, screen, camera, battery, and app support.

A purpose-built hardware wallet may have a smaller attack surface.

A smartphone may offer a larger screen and camera-based QR workflow.

The right choice depends on the user’s threat model, budget, supported networks, and comfort level.

For some Polkadot ecosystem users, Polkadot Vault can be a practical cold storage option.

For others, a dedicated hardware wallet may be simpler.

Parity Signer vs Hot Wallet

A hot wallet is connected to the internet or runs on an internet-connected device.

Parity Signer is intended to keep signing keys offline.

This is the main security difference.

A hot wallet is usually easier to use because it can prepare, sign, and broadcast transactions in one interface.

Parity Signer requires a two-device QR workflow.

A hot wallet may be better for small daily transactions.

Parity Signer may be better for larger balances, staking accounts, governance participation, or long-term storage.

A hot wallet can be exposed to browser attacks, malware, malicious dApps, and unsafe approvals.

Parity Signer reduces some of those risks by requiring offline review and signing.

However, users may still need a watch-only or desktop interface to monitor balances and prepare transactions.

Parity Signer vs Watch-Only Wallet

A watch-only wallet can display balances and transaction history without holding private keys.

Parity Signer can work well with watch-only workflows because the desktop or mobile online wallet may track the account while the offline signer approves transactions.

The watch-only device can be connected to the internet because it does not need the private key.

The signer device remains offline because it holds the private key.

This separation is useful for users who want convenience without sacrificing key isolation.

However, a watch-only wallet can still show misleading information if connected to a bad endpoint or fake interface.

Users should verify addresses and transaction details on the offline signer before approving any action.

A watch-only balance display is useful, but it should not be treated as a security boundary by itself.

The actual signing decision should happen on the offline device.

Common Use Cases

Parity Signer can be used for cold storage of Polkadot ecosystem accounts.

It can be used to sign balance transfers from an offline device.

It can be used for staking-related actions such as bonding, nominating, or changing staking settings when supported by the desktop interface.

It can be used for governance actions such as voting or delegation when the signing flow supports the required transaction.

It can be used by developers and power users who need to sign Substrate extrinsics with offline keys.

It can be used by long-term holders who do not want their private keys on a daily-use computer.

It can be used by treasury operators who want a clear separation between transaction preparation and transaction authorization.

It can be used by users who want an air-gapped setup without buying a dedicated hardware wallet.

It should not be used casually on a normal everyday phone that remains online.

The security model depends on the signer staying isolated.

Common Mistakes

One common mistake is using the same phone for daily activity and cold signing.

That weakens the air-gap model.

Another mistake is installing the app from an unofficial source.

A third mistake is connecting the signer phone to the internet after account creation.

A fourth mistake is failing to update metadata after a runtime upgrade.

A fifth mistake is scanning QR codes from untrusted websites without checking the source.

A sixth mistake is approving a transaction without reading the details on the offline device.

A seventh mistake is treating Parity Signer like a normal wallet app.

An eighth mistake is losing the recovery phrase.

A ninth mistake is storing the recovery phrase in cloud notes, screenshots, password managers, or chat apps without understanding the risk.

A tenth mistake is assuming that air-gapped signing protects against every possible attack.

Who Should Use Parity Signer?

Parity Signer is best suited for users who are comfortable with a two-device signing workflow.

It is useful for users who hold meaningful balances in Polkadot, Kusama, or supported Substrate-based accounts.

It is useful for users who want offline key storage but also need to sign staking or governance transactions.

It is useful for users who understand QR signing, metadata updates, and recovery phrase management.

It may not be ideal for complete beginners who need the simplest possible wallet experience.

It may not be ideal for frequent small transactions where convenience matters more than cold signing.

It may not be ideal for users who cannot safely store a recovery phrase.

It may not be ideal for users who cannot maintain a dedicated offline device.

The best user is someone who values security enough to accept extra steps.

The worst user is someone who wants cold storage but will ignore the operational discipline required.

Best Practices for Recovery Phrases

The recovery phrase is the most important backup for a Parity Signer account.

Anyone who has the phrase can usually restore and control the account.

The phrase should be written down offline during setup.

It should be stored in a safe physical location.

Large holders may use multiple secure storage locations to reduce loss risk.

The phrase should not be photographed.

The phrase should not be stored in email.

The phrase should not be typed into a desktop computer unless the user is intentionally moving the account to a hot environment and accepts that risk.

The phrase should not be shared with support agents, websites, social media accounts, or strangers.

If someone asks for the phrase, the request should be treated as a scam.

Parity Signer in One Sentence

Parity Signer (mobile + desktop) is an air-gapped crypto signing workflow where an offline mobile device stores private keys and signs QR-based transactions prepared and broadcast by a desktop interface.

FAQ

What is Parity Signer?

Parity Signer is the former name of Polkadot Vault, an air-gapped mobile signing app used to store private keys offline and sign transactions through QR codes.

Is Parity Signer still available?

Parity Signer has been rebranded as Polkadot Vault, and current official materials generally use the Polkadot Vault name.

Is Parity Signer a mobile app or desktop app?

Parity Signer is mainly a mobile signing app, while the desktop side is a compatible interface that prepares transactions and scans signed QR codes.

What does mobile plus desktop mean for Parity Signer?

It means the mobile device signs offline, while the desktop device connects to the blockchain, prepares transactions, and broadcasts signed results.

Does Parity Signer keep private keys offline?

Yes, when used correctly on a dedicated offline device, the private keys stay on the mobile signer and do not need to touch the internet-connected desktop.

How does Parity Signer communicate with a desktop?

It communicates through QR codes that move unsigned transaction data to the phone and signed transaction data back to the desktop.

What networks does Parity Signer support?

It is mainly used for Polkadot, Kusama, and other Substrate-based networks and parachains.

Why does Parity Signer need metadata updates?

It needs current metadata so it can decode and display transaction details correctly before the user signs.

Is Parity Signer safer than a hot wallet?

It can be safer for key isolation because the private keys stay offline, but it requires careful setup, metadata management, and transaction review.

Can I use my normal phone for Parity Signer?

You should use a dedicated device that has been factory reset and kept offline, rather than a phone used for everyday activity.

What is the biggest risk of Parity Signer?

The biggest risks are seed phrase exposure, wrong metadata, fake QR codes, fake app downloads, device loss, and signing without reading transaction details.

Is Polkadot Vault the same as Parity Signer?

Polkadot Vault is the current rebranded version of Parity Signer, so many older references to Parity Signer now refer to Polkadot Vault.

Conclusion

Parity Signer (mobile + desktop) is best understood as an air-gapped signing workflow rather than a normal wallet app.

The mobile device stores the private keys offline.

The desktop device prepares and broadcasts transactions online.

The two sides communicate through QR codes, which helps avoid exposing the private keys to internet-connected devices.

This design makes Parity Signer, now known as Polkadot Vault, useful for users who want cold storage for Polkadot, Kusama, and supported Substrate-based accounts.

It can help users sign transfers, staking actions, governance transactions, and other supported extrinsics with stronger key isolation.

However, the setup is only secure when used correctly.

The signer phone should be dedicated, factory reset, and kept offline.

The recovery phrase should be protected like the asset itself.

Metadata should be updated from trusted sources so the signer can display transaction details correctly.

Users should read every transaction on the offline device before signing.

The desktop side should be treated as potentially exposed because it is online.

Parity Signer offers a strong security model for users who can handle the extra steps.

Its main lesson is that cold storage is not only a product but also a process.

When the mobile and desktop workflow is set up carefully, Parity Signer can provide practical offline signing for serious crypto users.