Everything you need to hold assets together, safely.
Cermet is one app with two surfaces — a mobile signer and a web dashboard — over an MPC custody core. Explore by area.
Always 3-of-3 wallets
Every key is MPC-generated in three shares — one on your device, two in Cermet's secure enclaves. No seed phrase, no single custodian, and no threshold to misconfigure.
Hardware secure enclaves
Cermet's two shares live inside AWS Nitro and Intel SGX enclaves. Keys are used, never exported — even Cermet operators can't read them or move them off the hardware.
High-throughput signing
An enclave-backed signing pipeline handles production transaction volume with low latency — batch approvals and sign at the pace real treasuries need.
Multiple wallets
Separate treasuries, per-wallet members and policy, switched in a tap. Each wallet is its own tenant.
Six roles, least-privilege
Owner, admin, editor, signer, approver, viewer — each with an explicit, enforced voice in signing and governance. See the full matrix →
Secure policy engine
Transfer and governance rules are evaluated inside the enclave, before any signature exists. A blocked action is never signed — enforcement, not a warning.
Transfer policy
Ordered rules that allow, block, or require approval for a transfer by amount, asset, destination or initiator. First match wins; default-deny.
Governance policy
Decide who must approve governance itself — member changes, policy edits, whitelist and more — and how many.
Teams & approval groups
Bundle members into named teams and require approvals from a group — “2 of Finance admins.”
Approvals inbox
Proposed → approved by quorum → executed. Each vote is a signed decision on the exact bytes.
Whitelisted destinations
Maintain an allow-list of addresses a rule can require or auto-approve for.
Tamper-evident activity
A hash-chained audit log of every action across your wallets, verifiable on your device.
Break-the-glass recovery
If Cermet is ever unavailable, recover and move your funds from your own encrypted backups — no Cermet cooperation required. Self-custody means you're never locked in.
Encrypted backups
Password-encrypted share backup to iCloud or Google Drive. A stolen backup can't spend without your password.
Recover a lost device
Re-provision a signer through the quorum without exposing keys — the wallet re-keys the remaining shares to your new device.
Passkeys & 2FA
Sign in and step up with passkeys or one-time codes — no reused passwords, no SMS.
Web dashboard + mobile signer
Manage wallets and policy on the web at app.cermet.app; approve and sign from your phone.
40+ networks
Ethereum and 40+ EVM chains, Bitcoin, and Solana from one wallet — the right signing curve per chain, one address to manage. See the list →
Built on an open contract
A typed API between app and coordinator, so integrations and audits stand on a stable surface.