Feather Wallet

Feather Wallet is the privacy-focused desktop Monero wallet — community-built, fully open source, reproducibly buildable, with built-in Tor + I2P transports, multisig support, hardware wallet integration, and full-node-capable architecture. Listed at Grade A · editor's pick because it is the most privacy-aligned desktop wallet in the Monero ecosystem: no telemetry, no integrated swap that could siphon data, no opt-out tracking, Tails-friendly first-class build, and a desktop-grade GUI that surfaces most of the official Monero CLI feature set for users who want the depth.

Background. Started by `dsc` / `tobtoht` (handle @tobtoht on X), Feather has been actively developed since 2020-2021 and is now the maintainer's full-time work — funded via Monero Community Crowdfunding System (CCS) proposals approved by the community. Source code at github.com/feather-wallet/feather. Cross-platform: Linux (glibc ≥ 2.31), Tails / Whonix, Windows 10+, macOS 12+, plus ARM32 / ARM64 / RISC-V builds. Latest release at the time of this review: 2.8.1 (2025-04-14). Active changelog with monthly-ish release cadence and a stated philosophy of "test-bed for experimental features that may later be adopted in the reference wallets" — meaning Feather often ships UX or privacy refinements ahead of the official Monero GUI.

What you trust. Non-custodial — your wallet keys never leave your machine. The seed is generated locally (25-word mnemonic or polyseed), wallet files are encrypted on disk with a passphrase, and signed releases are published via GPG with a signing key available in the public Git repo. Reproducible builds let independent reviewers verify the binary matches the source. No phone-home telemetry, no integrated swap module that could correlate user identities with transactions, no third-party API calls beyond the user-selected remote node + Tor / I2P circuits. The "trust the operator" surface is effectively zero — what you trust is the GPG signing key + the reproducibility of the build.

Operational specs. Storage: local wallet file (encrypted), single-account or multi-account, optional Trezor / Ledger hardware wallet integration. Network: connects to a user-chosen remote Monero node by default (skips the multi-day initial chain sync), but can also run as a full-node-capable wallet for users who run their own monerod. Transport: native Tor support (bundled Tor binary, automatic routing), I2P support, clearnet. Privacy features: subaddress generation, coin-control with output freezing, transaction QR scanner, payment URI / OpenAlias, CSV transaction export with date-range filtering. Advanced: multisig wallets, hardware-wallet pairing, paper wallet generation. Onion mirror operator-published: featherdvtpi7ckdbkb2yxjfwx3oyvr3xjz3oo4rszylfzjdg6pbm3id.onion.

Philosophy. Feather's editorial differentiator is the deliberate absence of monetization surfaces. The wallet has no integrated swap (which would expose pair + amount + timing to a third party), no embedded marketplace, no built-in payment-processor onboarding, no fiat ramp module. The trade-off — fewer in-wallet conveniences — is the point: every embedded service is a privacy concession, and Feather chose to ship none. Pair this with the test-bed philosophy and you get a wallet that's both more conservative (privacy-wise) and more experimental (UX-wise) than the official Monero GUI.

Grade rationale. Grade A and editor's pick reflect: full open-source + reproducible builds + signed releases (verifiable trust chain); deliberate no-telemetry / no-third-party-integration posture; native Tor + I2P transport without external proxy setup; hardware wallet + multisig support (covers high-threat users); active full-time maintainer with CCS-funded continuity; first-class Tails / Whonix builds; absence of any security incidents, CVEs, or supply-chain concerns in the last 24+ months; consistent community positioning as the default privacy-oriented desktop wallet alongside or ahead of monero-gui. Last verified 2026-05-11.

Useful when. You want a Monero desktop wallet that gives you the official-CLI feature set with a usable GUI on top. You're running Tails / Whonix or a similarly hardened OS and need a wallet that doesn't fight the threat model. You want to use a hardware wallet (Ledger / Trezor) for cold-storage signing without giving up Tor routing. You want a wallet that doesn't include an integrated swap (which is a privacy concession). You're new to Monero and want a wallet that ships with sane defaults but lets you ratchet up later.

Caveats. Desktop only — no official mobile build (use Monerujo or Cake Wallet for Android; Cake Wallet for iOS). The "no integrated swap" stance means you'll route swaps through external aggregators (Trocador, the kyc.rip aggregator, etc.) — a feature for privacy, a friction for users who want one-app convenience. Remote-node default exposes your tx queries to whichever node operator you choose; for adversarial-threat use, point Feather at your own monerod over Tor. macOS 11 dropped support in 2.8.0 — Apple dropped macOS 11 as a build target for the toolchain Feather depends on. No formal third-party security audit has been publicly documented — the trust chain rests on reproducible builds + community code review rather than a paid audit. For users in the highest-threat tier, that's worth weighing against the alternative (running monero-gui or the CLI directly).