How to create a XUMM wallet?

2 min readFeb 22, 2022

What is a XUMM wallet, and how does it work?

XUMM is a non-custodial client wallet, meaning that XUMM allows its users to have full control of their private keys. In comparison, a custodial wallet such as Binance allows the user to transfer money from one account to another but cannot export the account to another wallet as you do not have access to the private keys.

The XUMM wallet allows users to sign into applications (instead of using a traditional email and password) and will enable users to sign XRPL transactions such as escrows, trust lines, and minting NFTs.

When a website or application such as nftmaster requests a transaction to be signed, the application (nftmaster) sends a request to XUMM with all the information. XUMM then authenticates the user and signs the transaction on the XRP ledger. This allows a transaction to be signed on the ledger without the application ever seeing the private key.

How to get started?

  1. Download the “XUMM — XRP Wallet” app from the App Store or Google Play.
  2. Set up a passcode; this is a six-digit combination. The password will be required when signing transactions. Alternatively, you can sign transactions using biometrics such as Face ID.
  3. Read and accept terms and conditions.
  4. You can now create an account by pressing “Add account,” “Create a new account.”
  5. You will then be prompt to save the secret key numbers; we suggest storing these in a safe place.
  6. Your account has been created! But not activated :( To activate your account you will need to first deposit 10 XRP into it (this is the reserve amount). The XRP can be sent to the new account from an account on a DEX.
  7. All done :) you can now start transacting on the XRPL using your XUMM wallet.

Note: The 10 XRP reserve can not be used in transactions, it stays in your account until you want to close the account. XRP has implemented this as a security mechanism to protect the shared global ledger from growing excessively large as the result of spam or malicious usage.