> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lasersell.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Wallet Encryption

> Learn how LaserSell replaces insecure plain text wallet files with an encrypted local-only keystore system that ensures your keys never leave your machine.

Security is the core of the LaserSell architecture. We understand that your private keys control your assets, which is why LaserSell uses a **zero-trust, local-only encrypted keystore system**. We do not store your keys on our servers, and they are never saved in plain text on your hard drive.

## Security Architecture

LaserSell replaces insecure "plain text" wallet files (like standard `id.json` files) with an encrypted **Keystore**.

* **Encryption:** Your private key is encrypted using **XChaCha20-Poly1305**, a high-performance authenticated encryption algorithm.
* **Passphrase Protection:** You must set a **Passphrase** to lock your wallet. We use **Argon2id** (a memory-hard password hashing algorithm) to derive your encryption key, making your wallet highly resistant to brute-force attacks.
* **Session Locking:** Your wallet is only decrypted in memory while LaserSell is running. If you close the application, the wallet automatically locks.