Pera Wallet ships 7.0 rebuild as Algorand's wallet field splits

The First Question Is Maintenance

In August 2026 the fastest way to evaluate an Algorand wallet is to check the commit log, not the feature list. The Algorand Foundation's start-here page¹ recommends five: Pera², Defly³, Ledger, Exodus and Lute⁴. Behind that shortlist the field is far from even. The default mobile app just finished a ground-up rebuild; the trading wallet issues occasional fixes behind a homepage frozen since 2022; and the browser wallet that once served thousands of desktop users was emptied in the 2023 MyAlgo compromise — reported losses of roughly $9.6 million⁵ — before shutting down the same year. Everything below is about reading who is still building.

All of these wallets are non-custodial: the private keys live on the user's device, no company can freeze or recover the funds, and whoever holds the 25⁶-word recovery phrase controls the account. What the wallets are for shifted in January 2025, when the Algorand 4.0 upgrade replaced the old vote-and-earn governance program — whose final rewards distributed after March 2025 — with consensus staking: block rewards paid roughly every 2.8 seconds as each block finalizes. Solo participation still requires at least 30,000 ALGO, so most holders earn through liquid staking or pooling services, and which route sits one tap away depends on the wallet. Browser wallets carry the highest phishing exposure (see the 2023 breach above); mobile narrows the attack surface, hardware narrows it further.

Pera: The Default Rebuilds Itself

Pera, launched as the official Algorand Wallet and rebranded in February 2022, is the closest thing to a default, with the tagline 'the easiest and safest way to store, buy and swap on the Algorand blockchain.' On August 11 the team announced version 7.0: a full rebuild in which one React Native codebase now generates both the iOS and Android apps, replacing years of separate Swift and Kotlin implementations so features reach both stores on the same schedule and the download shrank from 103 MB to 67.9 MB. The maintenance record supports the tagline — the pera-react-native repository received commits and a v7.1.0 release on August 20, and the iOS listing carries a 4.8-star average across 7,952 ratings.

The rebuild's security-relevant additions:

Pera also supports post-quantum accounts, a first among the wallets here, and runs a companion browser wallet, Pera Web⁷, whose keys are encrypted locally with zero analytics or third-party scripts. The tradeoffs are real. Pera Web and Pera Mobile do not sync — the wallet exists only on the device and browser where it was created — and no telemetry means edge-case bugs surface through user reports. The funding flow inverts the custody model mid-stream: buying ALGO or USDC with fiat through Pera Fund's regulated on-ramps applies KYC and puts a custodial intermediary between the user and their coins until they arrive. Pera Explorer's token-verification badges are Pera's own curation, not a neutral record — its terms say a badge is not an endorsement.

Defly: A Trading Desk That Has Stopped Investing

Defly³ is the trader's wallet, built by Innsbruck's Blockshake⁸ since 2022. Its core trick is the vPool: one pair listing that aggregates every supported decentralized exchange — Tinyman and Pact today, after Algofi and Humble left the ecosystem — routes an order to the venue executing it cheapest, and can split a single order across several DEXs to cut price impact on larger trades. Limit orders, full charts, Ledger and multisig support, and a 4.8-star average on 176 iOS ratings round out the product.

The caveats are structural. Defly discounts trading fees for holders of its own DEFLY token — the wallet's economics are tied to a token whose price fluctuates, so a user's effective cost depends on holding it rather than on the wallet alone. Development has slowed to a maintenance cadence: the homepage still leads with the 2022 token-presale unlock schedule (an April 2026 archive shows the same copy), the docs carry the line 'Last updated 3⁹ years ago,' and the Android app's most notable 2026 update, in May, added Ledger Flex and Stax support. It works; it is not being advanced.

Lute: The Ledger-First Specialist

Lute⁴ occupies the niche the others abandoned: a web wallet for desktop Ledger users, launched in January 2024 as the browser-wallet options for Ledger owners were disappearing. It is open source (AGPL-3.0) under GalaxyPay, built by a single developer, Andrew Funk, with commits as recent as August 19, 2026 (version 1.26.1). It connects Ledger devices over WebHID/WebUSB, imports rekeyed accounts as sub-accounts under the address they are rekeyed to, and its settings pane lists MainNet, TestNet, BetaNet, FNet, LocalNet, Voi MainNet and custom networks — plus a Snoop Mode for dApp connections with watch-only accounts and a Gold theme its settings reserve for holders of the Lutier token (asset 1904472606¹⁰, a 200-unit ASA created from a LUTE-prefixed address). Lute also hands out *.lute.algo subdomains; 16 segments exist under lute.algo.

The limits match its size: one maintainer, 11 stars and 4 forks on GitHub, and a hot-wallet mode still labeled experimental (a 2024 walkthrough required enabling browser flags to use it). For its intended audience — Ledger owners on desktop who want to skip WalletConnect — it is the most direct option; the repository's liveness is genuinely good, but the community around it is tiny.

Biatec: The Browser Wallet Shipping the Newest Safety

Biatec Wallet¹¹ (formerly A-Wallet, live since May 2021) is the most actively developed wallet in the field, run by Slovakia's Scholtz & Company. Its 672-star open-source repository received commits on August 20, and the 2026 changelog reads like a thesis on signing safety: ARC-52 hierarchical wallets (one phrase generating multiple accounts), ARC-56 contract-call decoding that translates opaque smart-contract calls into plain language before signing, dry-run simulation of a transaction group's real outcome, and ARC-60 signing that checks the requesting domain and refuses mismatches — direct countermeasures to the browser attacks that defined the 2023 breach. The wallet file is encrypted with AES-256 and stored in the browser's own IndexedDB, with a five-minute auto-lock.

Biatec also does something no other wallet here does: it publishes dated security audits, written by AI models, directly in its public repo. The most recent, dated August 4, opens with a blunt warning — one Critical and one High finding, both realistic paths to complete loss of an account's funds — both in the swap feature, with the fix now shipped in the deployed wallet. The weaknesses are symmetrical: a small user base, an unavoidable browser attack surface, and NFT display less polished than Pera's.

The Rest of the Field

Ledger¹² anchors the hardware layer: Algorand accounts pair with Pera (all Nano models) or Defly (Flex and Stax since May 2026), with private keys never leaving the device. Exodus¹³ is the multi-chain generalist — non-custodial but closed-source, so users trust the company's security practices — and its own documents list a sharp limit: in the mobile app, Web3 browsing, WalletConnect and the NFT gallery are only available to wallets created before April 22, 2026, so newer users get holding and swapping but no dApp connectivity. Trust Wallet¹⁴ similarly offers ALGO send, receive and store inside a wallet that, per its own site, serves over 220 million¹⁵ users. Kibisis¹⁶ is the AVM-chain extension that went quiet: its Chrome listing still shows 4,000¹⁷ users and a 5.0 average from 49 ratings, but no update since August 10, 2025. Method Wallet¹⁸ remains in its fifth year of private beta — waitlist-only, no public code, no visible audit — so its promised merge of DeFi and NFTs stays unverified until it opens.

Adoption at a Glance

The scale gap between Algorand-native wallets and the multi-chain giants shows up in App Store ratings — an imperfect but public proxy:

Pera's 7,952 ratings dwarf Defly's 176 among Algorand-first apps; both are tiny next to the multi-chain giants, whose rating bases are 5 to 25 times larger. The message: Algorand-native wallets have depth of integration but a small pool of users, while the generalists have reach without Algorand-specific features.

The Field at a Glance

How to Choose

Match the wallet to the threat model. A mobile app plus a Ledger for anything material covers most users; browser wallets suit desktop DeFi users who accept the phishing surface; a trader who lives in DEXs should weigh Defly's routing against its token-gated fees. The cheapest seatbelt on any choice is the maintenance check — last commit date, changelog freshness, whether the homepage still describes the product you hold. The field may also reshuffle soon: the Foundation's roadmap promises Rocca, a Web2-style, open-source, white-label self-custody wallet with passkey logins and no seed phrases, scheduled for launch in 2026 — the first Foundation-built wallet since Pera, and a direct challenge to every incumbent here.