Use your cold walleton Hyperliquid

Coldfront is a free Chrome extension that lets you trade on Hyperliquid from your cold wallet's account without connecting the wallet every time. Your cold wallet signs once, on Hyperliquid's API page, to authorize an API key. Coldfront keeps that API key encrypted on your computer and gives it to the official Hyperliquid app when you unlock. Withdrawals still need the cold wallet.

Yes, with Coldfront. The Ledger or Trezor authorizes a Hyperliquid API wallet once. After that you unlock Coldfront with a passphrase or Touch ID (passkey) and trade in the official Hyperliquid app with the device put away. It also works with Keystone, OneKey and other cold wallets.

The trading key that Hyperliquid's app creates when you press Enable Trading lasts 14 days. It is also replaced when you enable trading in another browser or on your phone. Each time, your wallet has to sign again, which with a Ledger or Trezor means getting the device out.

Not with the app's own key. An API wallet that you authorize yourself on Hyperliquid's API page can last up to 180 days. Coldfront gives that API key to the official Hyperliquid app, so you trade in the normal app for up to 180 days before your cold wallet signs again.

With the app's own key, yes. Hyperliquid keeps one of those at a time, so enabling trading on your phone replaces the one on your computer. Coldfront uses a named API wallet, and enabling trading on your phone doesn't replace it.

The API key it holds can trade but can't withdraw, send or transfer: Hyperliquid enforces that. It's encrypted with your passphrase (PBKDF2-SHA256, 600,000 rounds, AES-GCM), the extension only talks to Hyperliquid, and it locks by itself. The API key can still place bad trades, so revoke it on Hyperliquid's API page if you ever think it leaked.

Chrome, Brave, Edge, Arc and other Chromium browsers that install extensions from the Chrome Web Store, on macOS, Windows, Linux and ChromeOS.

For three things: authorizing the API key (it lasts up to 180 days), withdrawals, and moving funds between accounts. For everything else, unlock Coldfront and use the Hyperliquid app as usual.

Any cold wallet that can authorize an API wallet on app.hyperliquid.xyz, such as Ledger, Trezor, Keystone or OneKey, usually through MetaMask or Rabby. Coldfront itself never talks to the device.

Place, change and cancel orders, and let the app show your positions and balances. It cannot withdraw, send, transfer between accounts or approve other wallets. Hyperliquid enforces this, not Coldfront.

It's how we get paid, and it costs you nothing. The code takes 4% off your trading fees, and Hyperliquid pays us a share of the fees. We're a small independent team with no ads and nothing to sell, so that share is what keeps Coldfront running.

Only if it joined with code COLDFRONT. If your account has never used a referral code, Coldfront adds COLDFRONT during setup when you press Apply code. If it already uses another code, add a second account on the same cold wallet and join with the code there. The new account guide takes about five minutes.

On your computer, encrypted with your passphrase (PBKDF2 with 600,000 rounds, AES-GCM). It reaches the Hyperliquid tab only while Coldfront is unlocked, and it is removed from page storage as soon as the app has read it.

Every Hyperliquid tab reloads, so the app forgets the API key. Coldfront locks after the time you choose, when the computer is idle or the screen locks, or when the last Hyperliquid tab closes.

No. The extension talks only to Hyperliquid. There are no analytics, no accounts and no servers of ours.