Hyperliquid wallet and login guide: email, Web3 and mobile

Choose the access model you can secure

The official app supports wallet-based access through common EVM wallets and email-based login. A wallet keeps signing authority in a key you control. Email onboarding uses an embedded wallet and a verification code sent to the email address.

Use app.hyperliquid.xyz and verify the full hostname before connecting. Hyperliquid Field Guide never needs a wallet connection, private key, seed phrase or email login code.

• Choose a current Hyperliquid deposit route →

Sign in with email

Email login creates an embedded wallet. The email code gives access to the login flow, so do not give the code to another person or enter the code on another domain.

1. Open app.hyperliquid.xyz and check the full hostname.
2. Select Connect, enter your email address and select Submit.
3. Get the 6-digit code from your email and enter the code on app.hyperliquid.xyz.
4. Confirm that the app shows the account that you expect before you deposit or trade.

Connect an EVM wallet and enable trading

A wallet connection identifies the account. Enable Trading asks the wallet to sign the gasless authorization that Hyperliquid uses for trading. Read each prompt before you sign it.

1. Open app.hyperliquid.xyz and check the full hostname.
2. Select Connect, choose your EVM wallet and approve the connection in the wallet.
3. Select Enable Trading and review the signature request in the wallet.
4. Sign the request only if app.hyperliquid.xyz started it and the connected address is correct.
5. Confirm that the same address appears in the app before you deposit or trade.

Link a desktop wallet to mobile

The mobile flow starts with an EVM wallet that is already connected on the desktop. Treat the QR code as an account-linking credential.

1. Connect the EVM wallet to app.hyperliquid.xyz on the desktop.
2. On the phone, select Connect and then Link Desktop Wallet.
3. On the desktop, select the PC-and-mobile icon and sign the wallet prompt.
4. Scan the QR code that appears on the desktop with the phone.
5. Confirm that both devices show the account that you expect before you trade.

Check the domain and session before each action

Use the exact domain app.hyperliquid.xyz. A different subdomain, added word or changed top-level domain is a different site.

1. Check the full hostname before you enter an email code, connect a wallet or scan a QR code.
2. Check the active wallet address after login and after an account change.
3. Reject an unexpected connection, signature request or QR code.
4. End the session when you use a shared device or no longer control a linked device.

Exporting an email wallet exposes a private key

The official settings can export the private key behind an email wallet so it can be imported into a wallet extension. Exporting the private key converts a managed login flow into raw key material that anyone can use to control the wallet.

Export only on a trusted device, never paste the key into a website, and do not send it to support. A private-key export is not a normal troubleshooting step and should be followed by the same security standards as any self-custody wallet.

Frequently asked questions