Choose the access model you can secure
The official app supports wallet-based access through common EVM wallets and email-based login. A wallet keeps signing authority in a key you control. Email onboarding uses an embedded wallet and a verification code sent to the email address.
Use app.hyperliquid.xyz and verify the full hostname before connecting. This site never needs a wallet connection, private key, seed phrase or email login code.
| Method | How access works | Main responsibility |
|---|---|---|
| EVM wallet | Connect and sign an enable-trading message | Secure wallet and recovery phrase |
| Email login | Enter a six-digit email code | Secure email and embedded-wallet export |
| Mobile link | Pair a desktop wallet by QR code | Verify both devices and session |
Connect and enable trading
A wallet connection identifies the account; enabling trading authorizes the account flow used by Hyperliquid. Read the wallet prompt and confirm that the official application initiated it. Gasless does not mean consequence-free.
Use a dedicated trading wallet when practical. Keep long-term holdings separate, bookmark the official app and reject unsolicited support links or remote-screen requests.
Link a desktop wallet to mobile
The documented mobile flow starts from a wallet already connected on desktop. On mobile, choose Link Desktop Wallet, then display the QR code from the desktop PC-and-mobile control and scan it after signing the prompt.
Treat the QR code as an account-linking credential. Do not scan a code supplied in chat or by a support impersonator, and review connected sessions when a device is lost or replaced.
Exporting an email wallet exposes a private key
The official settings can export the private key behind an email wallet so it can be imported into a wallet extension. That operation converts a managed login flow into raw key material that anyone can use to control the wallet.
Export only on a trusted device, never paste the key into a website, and do not send it to support. A private-key export is not a normal troubleshooting step and should be followed by the same security standards as any self-custody wallet.