Key management

On EVM chains, Immutable Passport is a smart contract wallet. This smart contract will only process transactions if they are signed by two separate keys (a 2-of-2 multisig):

• User Key: stored by Magic, downloaded to the user's device to sign transactions
• Guardian Key: stored by Immutable, used to enforce risk controls and transaction scoping.

Note that Immutable never has access to the User Key, and all transactions must be signed directly on the user's device.