6.5 KiB
For Dojo seekers
Don't delete your wallet without your passphrase
Your Ashigaru or Samourai passphrase is shown only once, when the wallet is created, and is separate from the PIN you use to open the app; the two are not linked. To switch the Dojo your wallet connects to you must delete and re-create the wallet, so confirm you have the correct passphrase first. The passphrase cannot be recovered, and you need both the 12-word seed phrase and the passphrase to restore a wallet. To check a passphrase, go to Settings → Wallet → Check BIP39 Passphrase.
🔴 No passphrase: do not delete the wallet. Send the funds to a wallet you control instead.
🟢 Passphrase and 12 words: you can safely delete the wallet to change device or connect to another Dojo.
If you have the passphrase but not the 12 words, you can still open the wallet by decrypting the backup file with the passphrase. If you lose the Dojo connection and don't have the passphrase, export the XPUB to Sparrow for a watch-only wallet and sign offline from Ashigaru.
Who is responsible for the listed nodes?
Not The Dojo Bay: this site is a directory only. We do not operate the nodes listed here, we cannot guarantee their uptime, honesty or safety, and we accept no responsibility for them or for any loss of funds or privacy. Status and reliability figures come from automated checks and can be wrong or out of date. Treat every listing as untrusted: verify the pairing details, prefer self-hosting, and connect at your own risk.
Are there privacy concerns for Dojo seekers?
Yes. When you pair with a Dojo you share your extended public key (XPUB), and the operator can use it to view your past, present and future transactions. Only connect to a Dojo you consider reputable and trustworthy, and prefer your own node whenever possible.
How do I verify a listing?
Every listing here is signed, so there is always something to check. Start with the PayNym: confirm it belongs to someone whose reputation you can check, whether stated in a social-media bio, on their own site, or mentioned publicly, and look it up in the PayNym.rs directory to see its code. Then take the signed message from the listing to the BIP47 Message Verifier and fill in the fields; a correct message returns "Message verified successfully". If verification fails there, use Tools → Verify message inside Samourai or Ashigaru.
What this proves is narrow and worth being precise about. It proves that whoever holds the key behind that payment code published these exact pairing details, so the onion address and API key you are about to use are the ones their operator put their name to and not something substituted afterwards. It does not prove they are honest, that the node is well run, or that the payment code belongs to the person you think it does. That last part is your job, and it is why the PayNym step comes first.
Why doesn't the site verify the signatures for me?
Because a page that checks its own claims is asking to be trusted twice. If this instance were compromised it could show a green tick over a forged listing just as easily as a real one, so verification done here would be worth nothing at the exact moment you needed it. Doing it in your own wallet or in an independent verifier is the only version of the check that survives us being wrong or dishonest, so we make that as easy as we can and deliberately stop short of doing it for you.
Where do I learn to run my own Dojo?
A Dojo can be installed several ways: RoninDojo, a vanilla Dojo (instructions at dojo-osp.org), or through the Umbrel, Nodl and Start9 marketplaces. It runs on almost any Bitcoin node implementation, giving you full control of your Samourai / Ashigaru backend. Treat any public Dojo as strictly temporary or for testing: once your own node is running, migrate your funds to fresh addresses managed by your instance to avoid reusing previously exposed public keys.
For Dojo runners
Are there privacy concerns for Dojo runners?
Not security concerns so much as exposure ones. By sharing a pairing payload you reveal your Dojo's onion address, which a malicious party could try to DDoS. You also risk a large number of wallets pairing to your Dojo, so size your hardware accordingly. Until API-key management is fully in place you cannot un-share your pairing details once published.
What do I have to sign, and when?
Your pairing payload, at submission, and again whenever you change it. The signature covers the exact JSON you publish, so a new onion address or a rotated API key needs a new signature over the new details: the old one attests to what you are replacing and will be refused. Sign it with the same PayNym you sign in with, under PayNym → Sign message in Samourai or Ashigaru, and paste the whole block including its headers.
Is there a minimum Dojo version?
Yes, 1.27.0, judged on the version your node reports when we probe it rather than the one written into your pairing payload. If your node reports older than that, upgrade it before submitting.
Can I change the onion address if I'm being DDoSed?
Yes, but you will have to re-pair every connected wallet, and update the listing here with a signed payload covering the new address (see above). Until you do, the directory keeps publishing the old one and your listing will show as down.
Can I see how many wallets are connected to my Dojo?
No, and that will not be possible.
Can I cap the number if my hardware is limited?
It isn't really about connections but about tracking a very large number of addresses, and that limit is high even on lower-grade devices.