Amulet Scryer

How your seed is handled. When you open an encrypted .enc backup, the Scryer decrypts it just long enough to read the public keys, then erases the seed and your password from memory. Nothing seed-related is saved to disk or sent over the network, and the watch-only result cannot spend coins. One honest limit: no software can scrub a secret out of a browser's memory perfectly, so a faint trace can linger briefly until the browser clears it.

The safest path skips decryption altogether: in Amulet Vault, use 👁 Watch-only export and import the resulting .json file here. It holds no seed at all, so the Scryer never decrypts anything.

The Scryer is offline by default. To read balances it has to query public block-explorers with each of your watch-only addresses. The Scryer rotates between the listed endpoints to spread the load and avoid rate limits. Each operator sees only the share of addresses that lands on their server, plus your IP address. None of them can see, derive, or spend anything.