Toast Wallet Shut Down: How to Move Your XRP Out

Toast Wallet was a free, open-source XRP wallet for Android, iOS, Mac and Windows. On 18 June 2020 it announced it was shutting down and left the app stores. Its posts at the time said: “Existing Toast installs will continue to work and funds are safe” and “Toast is shutting down. Please move to another wallet.” (Finance Magnates)

You need the Toast app still installed and the passphrase for the account. These are the steps Xaman publishes:

1. Open Toast Wallet and sign in with your passcode.
2. Select your XRP Ledger account.
3. Tap Show Secret.
4. Enter the account’s passphrase, then tap Reveal Secret.
5. Write down the account secret. It is a “family seed”: one word starting with s.

The passcode opens the app; the passphrase unlocks each account’s secret. Xaman’s note is blunt: if the passphrase is lost or wrong, “we will not be able to assist you” (Xaman: How to migrate from Toast Wallet).

The safest move is to a new account with a new secret, not to keep using the old one: a secret that has sat in an abandoned app for years is a secret you cannot vouch for. Xaman’s guide recommends the same.

• If Toast still opens, create a new account in any current XRP Ledger wallet and send the XRP to it from Toast.
• If Toast no longer opens but you have the secret, import it into a current wallet, then send everything to a new account. In Xaman, import it as a family seed (Xaman’s guide, steps 6 to 14). On xrpl.to, choose Connect, then Import a wallet, and paste the secret.
• To take out every last XRP, delete the old account once it is empty of tokens and offers. The account keeps 1 XRP as its reserve while it exists (xrpl.org: Reserves); deleting it sends that XRP to the new account for a fee of at least 0.2 XRP (xrpl.org: Deleting accounts). xrpl.to’s wallet migration tool moves trust lines, tokens, NFTs and XRP to the new account and then deletes the old one.

The account secret is the XRP. Anyone who sees it can move everything, from anywhere. Never type it into a website you reached from a message, a search ad or a “recovery” offer, and never send it, the passphrase or your wallet files to anyone who offers to help.