# Security and Wallet Boundary

> Understand merchant key custody and wallet boundaries.

Canonical: https://stafiel.org/documentation/risk-and-reference/security-and-wallet-boundary
Version: v1.0.0

Stafiel does not ask for merchant wallet private keys or seed phrases, and it
does not take custody of merchant wallets. The configured settlement wallet
remains under merchant control.

Use this page to understand what Stafiel verifies and where the wallet boundary
is.

## Merchant Wallet Control

The merchant settlement wallet is the address configured to receive merchant
funds after eligible settlement. Stafiel records that address for checkout and
settlement, but the wallet itself remains under merchant control.

Do not share private keys, recovery phrases, or signing devices with Stafiel,
customers, vendors, or support channels.

For setup steps, see
[Wallet Settings](/documentation/merchant-operations/wallet-settings).

## Wallet Verification Signatures

Merchant Dashboard can ask the merchant to connect a browser extension wallet
and sign a verification message. The signature verifies that the merchant can
sign for the wallet address being configured.

That verification signature:

- Does not transfer funds.

- Does not create an on-chain transaction.

- Does not grant token approval, contract permission, or program authority.

- Does not give Stafiel access to the wallet's private key or seed phrase.

- Does not charge a network transaction fee.

Important: Always read the wallet prompt before signing. A wallet
verification message should identify address verification, not token spending
approval or fund movement.

## What Stafiel Provides

Stafiel provides the checkout, order tracking, payment status, refund
availability and records, settlement records, and integration surfaces used by
the merchant. Supported
blockchain payment rails enforce payment, refund, and settlement behavior for
each checkout flow.

These services do not make Stafiel the custodian of the merchant settlement
wallet. The merchant remains responsible for wallet access, signer security,
and recovery materials.

For how settlement reaches the merchant wallet, see
[Settlement Basics](/documentation/accept-payments/settlement-basics).

## Wallet Boundary Notes

For merchant settlement wallets:

- Use a browser extension wallet or hardware wallet that supports the selected
network.

- Keep wallet recovery phrases and backup codes in a secure private location.

- Do not use centralized exchange deposit addresses as merchant settlement
wallets.

For account security and MFA settings, see
[Account and MFA](/documentation/merchant-operations/account-access).

## Customer Payment Wallets

The merchant settlement wallet is different from the customer's payment wallet.
Customers pay from their own wallets, exchange withdrawal flows, or custodial
wallets. Those payment sources can affect refund reachability and support
handling.

For payment-source risks, see
[Payment and Refund Risks](/documentation/risk-and-reference/payment-and-refund-risks).