Security & recovery

Your wallet, your keys

Every account gets a fresh Ethereum wallet created in Privy - the same wallet infrastructure behind Hyperliquid, Farcaster, and dozens of other crypto apps. The key sits in Privy's secure vault; Mirrored never stores your private key on its own servers or in your account.

Privy holds the key, and Mirrored is an authorized signer on top of it. When you place a trade or withdraw, Mirrored asks Privy to sign - and Privy only accepts those requests from Mirrored's authenticated app credentials. So a hijacked login alone isn't enough to drain your wallet.

What Mirrored can do

• Place Polymarket buy and sell orders.
• One-time approvals to the exchange contracts, so trades can clear.
• Derive your Polymarket API key the first time you trade.
• Withdraw - but only to an address you confirmed yourself.

Every one of those is a real on-chain transaction you can audit. There is no path for Mirrored to move funds to an address you didn't approve.

Built directly on Polymarket

Mirrored isn't a separate exchange or a pooled fund - it trades straight on Polymarket from your own wallet. Your balance is real pUSD on Polygon, your positions are real Polymarket positions, and every order hits Polymarket's own order book. You can view and manage the exact same positions on polymarket.com any time - we're just a smarter way to place and copy those trades.

Take it with you, any time

It's a standard wallet, so you're never locked in. Export your private key and import it into whatever you like - MetaMask, Rabby, or Frame for EVM and Polygon, Phantom, or a hardware wallet. From that point you have full, independent control; Mirrored just keeps signing in the background.

In the web app, open Settings → Security → Export wallet keys. Pick your recovery phrase - a 12-word phrase that restores the whole wallet in any compatible app - or the raw private key, then press and hold to reveal it and copy it somewhere safe. You can also export from the Telegram bot under 💼 Wallet → 🔑 Export Private Key. Your keys don't change between exports, so you can run it again any time.

Recovering a wrong deposit

Sent an unsupported token to a deposit address? Polymarket's recovery tool can pull it back. You connect the wallet that received the funds and sign the recovery yourself.

Because Mirrored signs through Privy, you'll need the key in a wallet you control first: export it (above) and import it into MetaMask for EVM and Polygon, or Phantom, then connect on the recovery site and follow the prompts.

If you lose access

• Exported your key earlier - import it into any wallet and your funds are yours. You don't need Mirrored at all.
• Never exported - reach out and we can help re-bind your wallet after verification. But the real safety net is exporting early and storing the key yourself.