Loading Lightning in a Jar…

Lightning·in·a·Jar

Write down your seed

These twelve words are your wallet. Anyone with them controls your Bitcoin. Anyone without them cannot access it — not Plotzwerks, not anyone.

Write them on paper. Store the paper somewhere safe. Consider a stainless steel backup — fire and water proof. Stay offline, don't screenshot, don't email, don't type them into anything but a new wallet, Lightning or onchain, if you ever need to recover.

I've written down my seed phrase and stored it safely.

Lightning·in·a·Jar

Set a wallet passphrase

This locks your wallet on this device. You'll need it each time you open the wallet.

This is not your seed phrase and not a 13th word. It's a local password — separate from your Bitcoin keys. If you forget it, you can reset it by re-entering your 12 words.

Passphrase

Confirm passphrase

Lightning·in·a·Jar

Unlock wallet

Enter your passphrase to continue.

Forgot passphrase

SIMPLE

YOURS

LIGHTNING

Welcome to Bitcoin.

No accounts. No permission needed.
Lightning in a Jar — the place for your bitcoin.
Only you have the keys. Just you.
Add money, send money, anytime you like.

Lightning·in·a·Jar

OFFLINE

You’re offline. Your bitcoin isn’t.

No network is needed to hold your keys. Everything below lives on this device.

LAST KNOWN

On-chain—

Lightning

Total owned—

Recovering on-chain sats elsewhere: these 12 words in any BIP84 wallet (BlueWallet, Sparrow, Electrum) at m/84’/0’/0’ recover every on-chain sat. Set its gap limit to at least 350 to see every address.

Lightning funds: they live in channels tied to these same keys. Once any LiJ instance is back online, channel funds settle or sweep back to the keys above — worst case is the words plus patience. Nothing here can be spent by anyone without the words.

Sending and Lightning enabled when you’re back online.

Lightning·in·a·Jar

OFFLINE · WALLET MODE

No network.
Still your wallet.

Everything below lives on this device. Sending, fresh receive detection, and prices return when the network does.

WATCH-ONLY EXPORT · account zpub

Build a watch-only coordinator (Sparrow, BlueWallet, Electrum) without ever typing the 12 words: reveal, then scan or copy. A zpub can see balances and build unsigned transactions — it can never spend.

ESCAPE KIT · if the LSP disappears

Exit lightning and collect your onchain and lightning balances. Two pieces of text per channel, already signed, no secrets: THE CLOSE ends the channel on the Bitcoin network; THE COLLECT moves your share to your own address after the shown wait. Paste each artifact from the CLOSING and OPEN cards in turn on any online explorer’s broadcast page — settled channels have nothing left to collect — and never return to this wallet.

Lightning·in·a·Jar

Reset passphrase

Enter your twelve seed words to prove you own this wallet. We'll verify them against your stored wallet, then let you set a new passphrase.

Lightning·in·a·Jar

These words don't quite match

These twelve words don't match the wallet stored on this device.

A few possibilities:

One of your words is misspelled as another valid word
The words are in the wrong order
You're entering the seed for a different wallet

Lightning·in·a·Jar

Load an existing seed phrase

Enter the twelve words for the wallet you want to load. Any existing wallet on this device will be erased and replaced with this one.

Restoring a seed from another wallet? Add a year if your seed predates the birth of LiJ in 2026 (block 951888) →

Lightning·in·a·Jar

Set up your wallet

Are you starting fresh, or do you already have a recovery phrase to restore?

Your keys live encrypted on this device for transaction signing.

Lightning in a Jar is non-custodial — no one else holds your funds, so always securely back up your keys.

Lightning·in·a·Jar

Erase wallet and start over from this device

You're at the precipice. Once you confirm, every Lightning in a Jar trace on this device is gone — keys, channels, addresses, history, settings. There's no recovery without your seed phrase. If you don't have it written down somewhere safe, or if that's not what you intended, hit Back.

Type ERASE to confirm

Lightning in a Jar

Sovereign bitcoin wallet

Total owned

sats

LIGHTNING ₿

●●●●●●

sats

Sendablei— sats

Receivablei— sats

LSPi—

Quorumi—

Monitorsi—

Scan depthi—

Watcheri—

Buildi—

chain

lsp · — ms

quorum

Chain

synced

LSP

— ms

Quorum

—

↑ Send

↓ Receive

RECENT

No activity yet.
Receive your first sats to get started.

Send

Scan a QR that you pay

tap to open camera

or paste

Lightning invoice

Amount (sats)

10K

Max

Receive

Recovery Phrase

Inside the Lightning LIJOX standard…

…if you lose or erase your device: your 12 words + your encrypted channel-state auto-backup bring back everything — channels included.

…if you have only your 12 words: channels close on the open, and your money comes home on-chain within a few confirmations.

…if you load those words into another wallet app: set its gap limit to 500 first — LiJ spreads addresses farther than default scans look.

If you never touch LIJOX again: lightning channels close on your timer. Every sat waits at your seed.

No one — not even your LSP — can redirect a single sat.

Your keys...your bitcoin.

⚠️

Your 12 words will appear next. Make sure no one else can see your screen. The words will be cleared when you leave this screen or switch apps.

Enter your passphrase to view your recovery phrase

Recovery Phrase

⚠️

Write these 12 words down in order and store them somewhere safe. Never share them with anyone. These words are the only way to recover your wallet.

Delegate payment

Someone else spends up to your cap — signed by your key, honored by your LSP, cancelable any time.

Amount they can spend

Options ›

Sats move to your LSP now; whatever isn’t spent by the errand-runner comes back when the run ends or you cancel the run. This is a trusted arrangement with your LSP — not a cryptographic lock (yet).

node-key signed · registered with your LSP · hold for diag

Delegate payment to someone

Have them scan this

waiting

Delegate payment

What you must share to get routing at all: your invoices, amounts, timing, channel balances, and IP — the LSP is your channel counterparty and sees the traffic it carries. What it never holds: your keys or your funds.

The LSP can hold an incoming payment while you’re away — a longer window means more it observes; Off means offline payments fail fast instead. Your choice is sent to the LSP and clamped to its ceiling. This dial governs regular bolt11 invoices (amount receives) — LNURL address receives ride their own network-fixed window instead.

When a Lightning payment is waiting and LiJ is closed, your LSP sends a silent nudge so your phone shows a “payment waiting” notification. Tap it to reopen LiJ and the payment lands — no amount or detail travels with it, just a wake.

Wake this phone

Session logs live in memory only — the last 400 lines — and vanish when the wallet closes. Close-tapes rest on this device in plain storage, newest three kept, older pruned automatically. Off means nothing ever leaves this device; on ships both to the LSP when the wallet hides — and the LSP stops expecting on its own when you go quiet.

Ship device logs

An open wallet polls the LSP continuously — it knows when you’re here. Quiet checks in about every ten seconds instead: payments still work, they land a beat slower, and your presence pattern blurs.

Quiet

On: with no amount entered, Receive shows your static address — reusable, no expiry, held non-custodially by your LSP until you return. Off: every receive is a one-time bolt11 invoice and the address stays paused; claims already registered with your LSP remain payable until they run out. A permanent public code: every payer is visible to the LSP, and reuse links your receipts together as the LSP. Rotate severs that link — payers of the old code lose the thread. Old QR may keep receiving at the LSP until the already-submitted pre-signed invoices run out; full server-side removal TBA.

Receive via LNURL

What the LSP keeps, and for how long — every LIJOX provider will declare it. Shown here when manifests go live.

Independent operators cross-check the chain so no single one can lie to you. What you share to get this: each sees the addresses and transactions you ask about, and your IP. What they can’t know: your keys, your other addresses, or each other’s answers. The LSP declares the default set; you can add operators of your own on top — never fewer. Left blank, the LSP defaults stand. One healthy endpoint is enough to function; the count colors green when all answer, amber when some do.

Add an Esplora endpoint

When you’re expecting an on-chain payment, LiJ asks this endpoint whether your address has been paid — so it shows before it confirms. The default is the LSP’s own. Point it at your node’s Esplora and 0-conf checks stay fully yours. Saved on this device.Esplora endpoint

All four: a transaction fans out to every explorer at once — most reliable, and all four operators see it each time. One at a time: it goes to a single explorer (rotating per transaction) and stops at the first acceptance. Bitcoin needs just one honest node to propagate either way.

One at a time

Channel state backs up after every change, sealed under your key before it leaves. What you share to get recovery-without-the-device: Cloudflare (the backup host) sees that an encrypted blob arrived, its size, the timing of your activity, and your IP — never contents, never keys. Off means nothing leaves this device — recovery then depends on this phone surviving. Download saves the same sealed blob to this device as an archival copy; load it back anytime from Maintenance → Load backup from device.

Cloud backup

Finding an LSP means asking the registry — a Cloudflare-hosted worker. What you share to get discovery: the registry sees your IP and that this wallet is shopping for a provider. It learns nothing about your funds, keys, or channels.

Delegation chits mint through pageapp.app — a Cloudflare Worker: pageapp and Cloudflare see amounts, timing, and your IP, and the chit’s state lives on Cloudflare’s rails — if those rails go dark, delegation pauses. Keys never leave you: bounded spend authority is what’s delegated, and the payment preimage never touches the server.

Zero. Every script ships inside the app — QR tools, scanners, UR codecs, all vendored. No CDN, no analytics, no font server. Nothing outside this device learns the wallet even opened. It's a beautiful thing.

Your seed and channels are sealed under the vault. In plain storage, readable if the device is: cached balances, recent activity, and diagnostic tapes (close logs, scan logs — device-only, never shipped). Your zpub appears only while revealed and is never stored. Clearing lives under Maintenance.

Open the wallet with no network and still reach what’s yours: Lightning balances decoded live from this device’s channel state, fresh receive addresses, your static pay code, your recovery words and account zpub, offline transaction signing by camera or paste, and Erase. Nothing is shared with anyone — no network, no counterparty. Sending, live receive detection, and prices need the network and will say so.

Start without a network

Your seed is always encrypted. This seals the payment ledger, close records, and scan logs on this device under a key derived from your seed: a phone thief, a backup extract, or forensics without your passphrase reads only ciphertext. Nothing here leaves the device either way — this row is about whoever picks up the phone. Balance snapshots stay plaintext for instant boot. Flipping the switch takes effect immediately.

Encrypt history

Appearance

10 themes · tap to apply

Argent

1 · silver

Ginza

2 · 銀座

Smooth Plateau

3 · table

Hinoki

4 · 檜

Vitrine

5 · glass · dusk

Vitrine Crimson

6 · glass · ember

Vault · downlit

7 · spotlight

Vault

8 · V2 dark

Bitcoin Orange

9 · revolutionary

Kura

10 · 蔵

Add image

Choose a provider

Loading providers…

Connections

Loading…

Write down your seed

Set a wallet passphrase

Unlock wallet

Welcome to Bitcoin.

You’re offline. Your bitcoin isn’t.

No network.Still your wallet.

Reset passphrase

These words don't quite match

Load an existing seed phrase

Set up your wallet

Erase wallet and start over from this device

Choose a provider

Connections

No network.
Still your wallet.