Muun
Muun Wallet Inc
Muun is a self-custodial Bitcoin wallet for iOS and Android that handles both on-chain transactions and the Lightning Network behind a deliberately simple interface. Under the hood it uses a 2-of-2 multisig architecture: the phone holds a single key, while the Emergency Kit contains both. It is this Emergency Kit — private keys plus an output descriptor — that guarantees independent recovery of funds even if the Muun service were no longer available, alongside a separate Cold Recovery Code. The code is published on GitHub. Historically Muun was criticised for high on-chain fees; the app now uses a mempool-based estimator designed to get transactions confirmed while avoiding overpaying, but the fee topic remains a point to weigh for heavy on-chain users.
Data & conditions
| Fund custody | Self-custody (funds in your control) |
|---|---|
| Type | Software (hot wallet) |
| Source code | Partly open-source |
| Recovery | Emergency Kit (2 chiavi 2-of-2 multisig + output descriptor) e Cold Recovery Code |
| Bitcoin-only | Yes |
| Supported chains | Bitcoin, Lightning Network |
| Built-in swap | No |
| Built-in staking | No |
| dApp browser | No |
| WalletConnect | No |
| Segment | B2C |
| MiCA / License status | Nessuna (wallet self-custody non-custodial) |
Strengths
- Self-custodial with independent recovery guaranteed by the Emergency Kit (keys + output descriptor) and the Cold Recovery Code; on-chain and Lightning in a single simple app; 2-of-2 multisig architecture; open-source code on GitHub.
- Self-custody: funds stay in your wallet — the platform cannot touch them.
- No KYC: usable without identity verification.
Weaknesses
- Historically criticised for high on-chain fees: it now uses a mempool-based estimator, but heavy on-chain users should check its impact; recovery goes through the Emergency Kit, not a classic BIP-39 seed you write down.
- No notable sovereignty drawback documented.
Verdict
Score 4.1/5, solid profile. In its favour: self-custodial with independent recovery guaranteed by the Emergency Kit (keys + output descriptor) and the Cold Recovery Code; on-chain and Lightning in a single simple app; 2-of-2 multisig architecture; open-source code on GitHub. The trade-off to weigh: historically criticised for high on-chain fees: it now uses a mempool-based estimator, but heavy on-chain users should check its impact; recovery goes through the Emergency Kit, not a classic BIP-39 seed you write down.
On the Sovereignty lens the score is 4.1/5 (very strong): the strength is fund control (5.0/5), while trustless / auditability (2.5/5) is the weak link.
Promp's editorial rating based on real fees and net annual cost. Promp reviews third-party products independently.
"Sovereignty" rating: score computed on privacy/anonymity (30%), fund control (20%), censorship resistance (20%), trustless/auditability (20%) and costs (10%). Same data, different weights.
FAQ
Is Muun custodial?
No. Muun is a self-custodial wallet with a 2-of-2 multisig architecture: the phone holds one key, while your Emergency Kit contains both keys plus the output descriptor. This lets you recover your funds independently even without the Muun service.
How do you recover funds on Muun?
Recovery is done through the Emergency Kit, which contains the private keys and the output descriptor, alongside a separate Cold Recovery Code. It does not use a classic BIP-39 recovery phrase: it is therefore essential to keep the Emergency Kit and the Recovery Code (source: Muun's official site, August 2026).
Are Muun's fees high?
Muun was criticised in the past for high on-chain fees. The app now uses a mempool-based estimator designed to get transactions confirmed without overpaying; it remains a point to weigh if you make heavy use of on-chain transactions (source: Muun's official site, August 2026).
Sources
- Official service page Self custody · On chain · Lightning · Multisig 2di2 · +5 Data verified on Aug 3, 2026
- github.com Open source · Azienda Data verified on Aug 3, 2026