Hyperliquid login & registration — what it really means to "log in"

There is no "Hyperliquid account" — and that changes everything

Let us start by dismantling the single biggest misconception that brings people to this page. On a custodial exchange, "your account" is a record on the company's servers: a row in a database keyed to your email address, protected by a password and ideally a second factor. When you log in, you are asking that company to unlock its copy of your balance. The funds live in the exchange's wallets; you hold a claim on them.

Hyperliquid does not work that way at all. There is no database row with your name on it, no password stored anywhere, and no company holding your coins. Hyperliquid is non-custodial. Your "account" is your own blockchain wallet — a cryptographic key pair that you, and only you, control. When you "log in," you are not unlocking a server; you are proving to the app that you control a particular wallet address by connecting it. The app then reads the public blockchain to display the balances and positions associated with that address.

This is not a cosmetic difference. It rewires who is responsible for what. On a custodial venue, the company is responsible for keeping your funds safe and can help you recover access if you get locked out. On Hyperliquid, you are the custodian. Nobody can freeze your funds, reverse your trades, or seize your balance — and equally, nobody can rescue you if you lose your keys or sign a malicious transaction. We have audited exchanges and wallets since 2017, and we have watched this single concept separate the people who keep their crypto from the people who lose it. Internalise it before you connect anything.

The practical upshot for this page: most of the "registration" advice you will find for centralised platforms simply does not apply. There is no email to verify, no KYC document to upload, no password to choose, no account to "open." The entire on-ramp is one action — connecting a wallet — and the security work happens before and around that single click, not in a sign-up form.

What you need before you start

Because there is no account to register, your preparation is about having the right tools and the right link in hand. Three things are non-negotiable:

• A self-custody wallet. This is software (or hardware) that stores your private keys and signs transactions. Common choices are browser extensions such as MetaMask or Rabby, or a hardware wallet like a Ledger or Trezor for larger balances. If you do not have one yet, read our wallet guide first — set it up calmly, write down the recovery phrase offline, and only then come back here.
• Some funds to bridge or deposit. Connecting is free, but to trade you will need assets in the wallet and, typically, to bridge them onto the Hyperliquid network. You do not need this just to look around, but you will need it before your first trade.
• The correct official URL. The official app lives at app.hyperliquid.xyz. This matters more than almost anything else on this page. The most expensive mistake in crypto is not a bad trade — it is connecting your wallet to a convincing fake.

High-risk warning · phishing

Fake "Hyperliquid login" pages are everywhere — promoted through Google ads, posted in Discord and Telegram, and seeded in search results. They copy the real interface pixel-for-pixel, then trick you into signing a malicious transaction that drains your wallet. Bookmark the real URL (app.hyperliquid.xyz) the first time you visit and use only that bookmark afterwards. Never reach the app through an ad, an email link, or a DM. If a site asks for your seed phrase, close the tab immediately — that is always a scam.

Step-by-step: connecting your wallet

Here is the entire "login" process. It takes under a minute once your wallet is set up. Go slowly the first time and read each prompt rather than clicking through on autopilot.

Read this twice: a genuine wallet connection will never ask you to type, paste, upload, or photograph your seed phrase (also called a recovery or mnemonic phrase). Your seed phrase belongs in exactly one place — offline, on paper, where only you can reach it. Any website, "support agent," app, or pop-up that requests it is trying to steal everything in your wallet. There are no exceptions to this rule.

Coming from a custodial exchange? How sign-up & 2FA differ

If your reference point is Binance, Coinbase, Bybit, or CEX.IO, the Hyperliquid flow can feel almost unnervingly bare. On a custodial exchange, registration is a multi-step ritual: you enter an email, choose a password, verify the email, and then complete KYC (Know Your Customer) by uploading an ID document and sometimes a selfie. Only after the company verifies your identity do you get full access. That friction exists because the exchange is a regulated financial business holding your money — it has legal obligations to know who you are.

Securing a custodial account is therefore a different discipline. Because the company holds your funds, the weak point is account access, so you harden the login itself:

• Use an authenticator app, not SMS, for two-factor authentication (2FA). SMS codes can be intercepted through SIM-swap attacks, where a criminal hijacks your phone number. An authenticator app (such as a TOTP generator) or a hardware security key is far stronger. Enable 2FA the moment your account is created.
• Choose a long, unique password. Never reuse a password from another site, and store it in a reputable password manager rather than your memory or a note.
• Turn on withdrawal allowlists. Most custodial exchanges let you whitelist specific withdrawal addresses, so even if someone breaches your account they cannot send funds to an unknown address. Combine this with a withdrawal delay if offered.
• Beware of phishing on the login page itself. The custodial world has the same fake-login problem — bookmark the real exchange and check the domain every time.

The contrast is clean. On a custodial exchange you protect a login: email, password, 2FA, allowlists. On Hyperliquid there is no login to protect, so you protect a key: your seed phrase and the device that holds it. Different model, different defences. Neither is automatically "safer" — they fail in different ways. Custodial accounts can be frozen, hacked at the company level, or restricted by regulation; non-custodial wallets put the entire burden of security on you, with no recovery if you slip.

Common login problems & fixes

Because connecting a wallet touches your browser, your extensions, and the blockchain network all at once, most "I can't log in" complaints trace back to a handful of predictable causes. Work through this table before assuming anything is broken on the app's side.

If none of these resolve it, step away rather than improvising. Do not search for "Hyperliquid support" and click a paid ad — official projects rarely run support through search ads, and that is a favourite hunting ground for scammers. Check the project's verified channels, and never share your seed phrase with anyone "helping" you, no matter how official they appear.

Security checklist before your first trade

Run through this list once, deliberately, before you move real money. Most catastrophic losses happen in the first ten minutes of using a new venue, when habits are not yet formed.

• ☐ I reached the app through my own bookmark of app.hyperliquid.xyz, not an ad, email, or DM.
• ☐ I verified the exact domain in the address bar, character by character.
• ☐ My seed phrase is written down offline and has never been typed into any website.
• ☐ I confirmed the wallet address shown in the app matches my own.
• ☐ I read every signature and transaction prompt before approving — I do not blind-sign.
• ☐ I started with a small test amount before committing larger funds.
• ☐ For meaningful balances, I am using a hardware wallet rather than a hot browser wallet.
• ☐ I understand that no one can recover my funds if I lose my keys or sign a malicious approval.

Pro tip

Keep a small "burner" wallet for connecting to new or unfamiliar apps and keep your main holdings in a separate hardware wallet that you connect only when necessary. Compartmentalising this way means a single bad approval cannot empty your entire stack. Periodically review and revoke old token approvals, too — a connection you granted months ago can still be a live risk.

Frequently asked questions