Your keys and self-custody
EarnOrg is not an exchange. You own your EarnOrg wallet, every agent wallet and the rules each agent follows, and you can export any private key at any time.
EarnOrg is not an exchange and does not hold your money in pooled or company accounts. Every wallet you use in EarnOrg belongs to you, and you can export its private key whenever you want.
Your wallets
| Wallet | What it is | Who can move the funds |
|---|---|---|
| EarnOrg wallet | Your own wallet, created by Privy when you sign in. Cash moves in and out through it. | Only you. You approve every transfer from it in the app. EarnOrg has no key that can move your funds. |
| Agent wallet | Each agent has its own wallet that you own, along with the rules it follows. The rules are a Privy policy built from the agent's template. | So the agent can run while you are offline, Thirdfy's agent signer signs its trades. Privy lets it sign only the actions in the agent's template, and it can withdraw funds only to you, at your payout address. EarnOrg does not sign agent trades. |
Older accounts had approved EarnOrg to send transfers from the EarnOrg wallet for them. EarnOrg is retiring that access for every account. You do not need to do anything.
What needs your signature
Some changes only you can make. EarnOrg asks you to approve them with your wallet:
- Stopping and resuming an agent
- Approving new venues after the agent's template changes
- Changing your payout address
- Exporting a private key
Who can do what
| Withdraw funds | Trade within the template | Change the rules | Export the key | |
|---|---|---|---|---|
| You | Yes | Yes | Yes | Yes |
| Thirdfy's agent signer | Only to your payout address | Yes | No | No |
| EarnOrg | No | No | No | No |
Your login protects all of this: whoever can sign in as you can approve for you. Keep your login safe and turn on two-factor authentication.
You stay in control of every agent wallet: pause the agent, withdraw to your EarnOrg wallet, or export the key and use it in any wallet app.
Older agent wallets
Agent wallets created before this change keep working. They move to the new model, where you own the wallet and its rules, when you approve the move. A prompt for this is coming soon to the agent's Wallet controls.
Export a private key
| Surface | Path |
|---|---|
| Web | Wallet → Export private keys, an agent's wallet card → Export key, or Settings → Account → Your keys → Export private keys |
| iOS | Account → Wallet → Export private keys, or an agent's Wallet tab → Export private key |
Only the organization owner can export keys.
- Open Export private keys. The page is locked: your wallets and keys stay hidden until you confirm it is you.
- Select Verify and show my keys. Sign a message with your EarnOrg wallet (it moves no funds and costs no gas). EarnOrg also needs two-factor authentication, or a login from the last 10 minutes: confirm with an email code or your Google, Apple or X account, or turn on two-factor. On iOS, Face ID comes first and you sign in again on the export page.
- Your wallets show, unlocked for about 5 minutes. A countdown shows when the page locks again; select Lock now to lock it sooner.
- Pick a wallet, read the warning and type EXPORT:
- EarnOrg wallet: Privy opens its secure window with your key. EarnOrg never sees it.
- Agent wallet: the key is encrypted to your browser and opened there. EarnOrg only passes along the encrypted copy. Your browser checks the key matches the wallet before it shows it.
- Reveal or copy the key. Closing the window clears it, and a copied key is cleared from the clipboard after a minute.
You can export up to 3 times an hour and 10 times a day.
After an export
- You get an alert for every export, in the app and as a push notification. You cannot turn this alert off. If you did not export a key, pause your agents and contact support.
- Your agent keeps trading with its wallet after you export the key. Pause it first if you plan to move the funds yourself.
- Keep the key safe. Anyone with it controls the wallet on every chain. EarnOrg cannot recover a key that is lost or shared. Never paste it into a website.
Wallets that cannot be exported here
- Your own wallet that you connected to an agent: you already hold its key in your wallet app.
- Older agent wallets from an early wallet type show Cannot be exported yet. Contact support to move the agent to an exportable wallet.