Hardening your Cake Wallet mobile installation
Cake Wallet includes many strong protections by default, but there are some steps you can take to further improve your privacy and security.
Factory reset your phone and consider a custom operating system
In the best case, you should use a dedicated, modern phone that is still receiving software updates. Factory reset the phone and only use it as your Cake Wallet phone. Don't use a work phone. Leave the phone off if you aren't using it, so that the encryption is enforced.
Some people prefer using an operating system such as CalyxOS or GrapheneOS for Android. Typically, first-party phone providers such as Google and Apple provide faster security updates, at the expense of weaker privacy protections by default. If going with a custom ROM, we recommend ROMs that maintain security features like maintaining verified boot.
If you are overwhelmed, start with a modern, factory reset phone from Apple or Google that is still getting software updates. Don't let perfection get in the way of at least starting there.
Avoid using a SIM if you can. Otherwise, get a SIM from Silent Link, Mint Mobile (prepaid card picked up in store), or Twilio (advanced and out of scope for this guide).
Configure phone security settings
You may want to turn off facial and fingerprint phone login. Select a strong login password.
Make sure device encryption is enabled. This is enabled by default on most devices now.
The University of Texas at Austin has good phone hardening guides:
On Android, it is recommended to perform the following additional steps after enabling a IVPN, Orbot, Invizible Pro, etc.
Custom DNS provider
You may want to change your DNS provider in your phone to one you trust. Common privacy-friendly DNS providers are IVPN and 1.1.1.1 (Cloudflare), or using InviZible Pro (more on that later).
Install applications
You generally will want a few apps:
Cake Wallet and/or Monero.com. Obviously :)
Orbot. This is your mobile gateway to Tor.
InviZible Pro (Android only). This is an alternative to Orbot that will automatically handle Tor/onion connections and clearnet connections simultaneously.
VPN. You may wish to use a VPN. Choose one recommended by Privacy Guides. Pay with XMR. VPNs have limitations.
You can install apps from your phone's respective app store or from their APKs.
Keeping Cake Wallet and other applications updated
We recommending finding a workflow, either through automatic or manual updates, to ensure you're receiving the latest security updates for applications. If a vulnerability is ever patched, you want to receive it as quickly as possible. Additionally, it's not uncommon for applications like Cake Wallet to introduce new security features you can benefit from.
Some users prefer automatic updates to receive the newest updates automatically, and some users prefer manual updates to verify new software. Regardless of your preference, make sure you're finding a workflow that works for you.
You should run your own node(s)
For best privacy, you really should run your own Monero, Bitcoin, etc. nodes.
We have a guide for running your own Monero node here.
Using Cake Wallet for the first time
Enable Cake 2FA
We recommend enabling Cake 2FA.
If you are running your own node, you can connect to it without needing Tor, which allows for significantly faster syncing.
We recommend using your own clearnet node in most cases for best performance. Learn more about using Tor with Cake Wallet.
You can change these settings later in "Privacy settings" and "Connection and sync".
Using Orbot
You will need to use Orbot in full device VPN mode. You will want to toggle off Tor while syncing, but enable it for sending transactions.
Syncing
For Monero, we recommend syncing to your own clearnet node for practical purposes. Disable Tor with Orbot for syncing. If you must use a different node, you can sync entirely over Tor, but it will take a long time for more than a few days of blocks (hours / days).
If you are using iOS, we recommend force closing Cake Wallet before switching to enable/disable Orbot to reduce the chance of iOS VPN leaks.
Sending
We recommend sending through your own node. This can be done over clearnet or Tor. If you use someone else's node, we recommend using Tor.
It's convenient to have fiat spot pricing data, so we recommend turning on Orbot after your wallet is synced and using the "Tor only" fiat API setting. Sending transactions over Tor is slower than clearnet, but it's not unbearably slow.
Exchanging
We recommend exchanging using the "Tor only" setting. Exchanging over Tor has reasonably good performance. After your wallet shows as "SYNCHRONIZED" at the top of the home page, enable Tor with Orbot.
Using InviZible Pro
Use InviZible Pro for simultaneous encrypted DNS for clearnet + Tor for .onion connections.
Configuring Cake Wallet for use with Invizible