Self-custodial Bitcoin and Lightning in one app. Submarine swaps make it simple. They also make it expensive.
Muun is the easiest self-custodial Bitcoin wallet you can download right now. No accounts, no KYC, no channel management. You install it, back up your emergency kit, and you are ready to send and receive both on-chain Bitcoin and Lightning payments. For someone who just bought their first sats on an exchange and wants to move them into their own custody, it is hard to beat Muun for simplicity.
But that simplicity has a price. Literally. Muun's Lightning fees are 10 to 50 times higher than what you would pay on Phoenix or Breez because of how submarine swaps work under the hood. If you are paying for coffee with Lightning every morning, Muun will eat your savings in fees. It is a great starter wallet and a solid on-chain option, but calling it a "Lightning wallet" without mentioning the fee problem would be dishonest.
That is why it gets a 7.5, not a 9. The UX deserves a 9. The fee structure pulls it down. Read on for the full breakdown of when Muun makes sense and when you should pick something else.
| Category | Score | Notes |
|---|---|---|
| Ease of Use | 9/10 | Best onboarding of any self-custodial wallet |
| Security | 7.5/10 | 2-of-2 multisig, but hot wallet with server dependency |
| Lightning Fees | 5/10 | Submarine swaps make Lightning 10-50x more expensive |
| On-Chain Fees | 8/10 | Standard miner fees, Taproot enabled by default |
| Privacy | 5.5/10 | No own-node support, Muun servers see all activity |
| Features | 6/10 | No coin control, no batching, no labels, no RBF |
| Overall | 7.5/10 | Best beginner wallet, but expensive for Lightning power users |
| Spec | Details |
|---|---|
| Wallet Type | Mobile hot wallet (self-custodial) |
| Key Model | 2-of-2 multisig (phone + Muun server) |
| Lightning | Yes (via submarine swaps) |
| On-Chain | Yes (native) |
| Taproot | Yes (default) |
| Platforms | iOS, Android |
| Open Source | Yes (mobile apps), No (server) |
| Own Node | No |
| Coin Control | No |
| Backup Method | Emergency kit (encrypted PDF + recovery code) |
| KYC Required | No |
| Price | Free |
Most Bitcoin wallets treat on-chain and Lightning as two separate things. You have your on-chain balance in one place and your Lightning channels in another. Muun takes a different approach: it shows you a single balance and handles the routing behind the scenes. When you scan a Lightning invoice, Muun pays it. When you receive an on-chain transaction, it just shows up. One wallet, one balance.
The trick that makes this work is called a submarine swap. When you pay a Lightning invoice through Muun, the wallet does not actually route the payment through Lightning channels it controls. Instead, it creates an on-chain Bitcoin transaction that gets "swapped" into a Lightning payment by a swap provider. You see a Lightning payment go through. What actually happened was an on-chain transaction that got converted at the last step.
This design choice has real benefits. You never have to think about channel capacity, inbound liquidity, or routing failures. Those are problems that trip up even experienced Lightning users. Muun hides all of it. For a beginner who just wants to pay a Lightning invoice without understanding payment channels, this is genuinely useful.
The downside is straightforward. Every Lightning payment carries on-chain fees because there is an on-chain transaction involved every time. When the Bitcoin mempool is quiet and fees are low (1-2 sat/vB), you might not even notice. But during fee spikes, a simple Lightning payment through Muun can cost $3 to $5 in fees, while the same payment on Phoenix would cost less than a penny. That is the tradeoff at the heart of Muun's design.
Understanding submarine swaps is key to understanding why Muun's fees work the way they do. Here is what happens step by step when you pay a Lightning invoice through Muun.
First, you scan a Lightning QR code or paste an invoice. Muun reads the payment details: amount, destination, and expiry. Then Muun constructs an on-chain Bitcoin transaction. This transaction locks your Bitcoin into a special HTLC (Hash Time-Locked Contract) on the Bitcoin blockchain. The swap provider monitors for this on-chain transaction. Once it confirms (or in some cases, at zero confirmations), the swap provider releases the equivalent Lightning payment to the recipient.
The recipient gets paid over Lightning instantly. From their perspective, nothing unusual happened. But on your end, you paid with an on-chain transaction. The swap provider bridged the gap between the two networks. Muun made the entire process look like a single tap-and-pay experience.
Receiving Lightning payments works in reverse. Someone sends you a Lightning payment. The swap provider receives it, then creates an on-chain transaction that deposits the funds into your Muun wallet. You see Lightning sats arrive. Under the hood, they came through an on-chain deposit.
This is why Muun's Lightning fees are higher. Every Lightning transaction, whether sending or receiving, involves an on-chain Bitcoin transaction. You are paying miners for block space on every single payment. Native Lightning wallets like Phoenix keep payments inside existing channels, so you only pay tiny routing fees (fractions of a sat). Muun pays real on-chain fees every time, and those fees fluctuate with mempool demand.
Let's put real numbers next to each other. Here is what you actually pay for Lightning transactions across the most popular mobile wallets. All fee estimates are based on typical 2025-2026 mempool conditions.
| Wallet | LN Send Fee | LN Receive Fee | On-Chain Fee | Setup Cost | Notes |
|---|---|---|---|---|---|
| Muun | $0.10 - $5.00+ | $0.05 - $2.00+ | Standard miner fee | None | Depends on mempool congestion |
| Phoenix | ~0.4% (1 sat min) | ~0.4% (1 sat min) | Swap-in fee | 1% channel open | Channel required first |
| Breez | < 1 sat typical | < 1 sat typical | Swap fee | 2,500 sat first channel | Greenlight cloud node |
| Zeus | < 1 sat typical | < 1 sat typical | Standard | Varies by LSP | Embedded LND node |
| BlueWallet | Custodial: free | Custodial: free | Standard | None | LN is custodial by default |
The pattern is clear. During low-fee periods (1-3 sat/vB), Muun's Lightning fees are tolerable: maybe $0.10 to $0.30 per payment. During fee spikes (50+ sat/vB), the same payment can cost $3 to $5. Phoenix charges roughly 0.4% of the amount with a 1-sat minimum regardless of mempool conditions. For a 50,000-sat payment (about $50), Phoenix costs about 200 sats. Muun might cost 5,000 to 20,000 sats depending on congestion.
Be honest with yourself about how you will use Lightning. If you make one or two Lightning payments a month, Muun's fee premium is a minor annoyance. If you use Lightning daily for purchases, podcasting sats, or tipping, you will spend more on Muun fees in a month than most people spend on their phone bill.
Muun does not use the standard 12-word seed phrase that most Bitcoin wallets rely on. Instead, it has a two-piece backup system called the emergency kit. Understanding how it works is important because it directly affects your ability to recover funds if something goes wrong.
Piece 1: The encrypted PDF. During setup, Muun generates an encrypted PDF file and emails it to you. This PDF contains your wallet's private key material, transaction history, and output descriptors, all encrypted. Without the recovery code, the PDF is useless ciphertext. Muun stores this PDF on their servers too, which is how normal device-to-device transfers work. But the point of emailing it to you is that you should save a copy independently.
Piece 2: The recovery code. This is a short alphanumeric code that Muun displays on screen during the backup process. You write it down on paper (or stamp it on metal if you are serious). This code decrypts the PDF. Without it, the PDF cannot be opened. Without the PDF, the code is meaningless. Both pieces are required.
Step-by-step recovery process: If your phone is lost or destroyed, download Muun on a new device. Tap "I already have a wallet." Enter your recovery code. Muun's servers locate your encrypted PDF and restore your wallet. That is the normal path. But if Muun's servers are also gone, you use the recovery tool from github.com/muun/recovery. Download the tool, feed it your saved PDF file and recovery code, and it extracts your private keys so you can sweep funds into any other wallet.
Practical advice: Do not leave the PDF sitting in your email inbox. Email is not secure storage. Save the PDF to a USB drive and store it somewhere physically safe. Write the recovery code on paper (or metal) and store it in a separate location from the USB drive. If someone gets both pieces, they have your Bitcoin. If you lose both pieces, your Bitcoin is gone. Treat it like the cold storage backup it is.
Muun uses a 2-of-2 multisig setup for all on-chain transactions. Your phone holds one private key. Muun's servers hold the other. Every transaction requires both keys to sign. This means a compromise of either side alone cannot steal your funds. If an attacker gets your phone, they still need Muun's server key. If Muun's servers are compromised, the attacker still needs your phone key.
The question everyone asks: what if Muun the company disappears? Your emergency kit contains both keys. The second key (Muun's server key) is encrypted with your recovery code inside the PDF. So you hold the decryption key to both sides of the multisig. Muun's recovery tool can reconstruct the wallet from these materials and broadcast a recovery transaction to sweep all funds to an address you control. This is tested and documented.
There is a time-lock mechanism too. If Muun becomes unresponsive and you cannot use the normal recovery flow, the time-lock allows you to move funds after a set period using only your phone key. This is a safety net built into the multisig contract itself.
The honest limitation: this is still a hot wallet. Your keys live on a phone that is connected to the internet, runs dozens of other apps, and can be compromised by malware. The 2-of-2 multisig adds a layer over a standard single-key hot wallet, but it does not match the security of a hardware wallet where keys never touch an internet-connected device. Use Muun for spending money. Keep your savings offline.
Privacy-conscious Bitcoiners should understand what information Muun's servers have access to. Because Muun does not support connecting your own node, all wallet activity passes through Muun's infrastructure.
What Muun can see: Your IP address (unless you route through a VPN or Tor, which Muun does not natively support). All of your Bitcoin addresses, both receiving and change. Every transaction you send or receive, including amounts, timestamps, and destinations. Your full UTXO set and balance. For Lightning payments, Muun also sees the Lightning invoices you pay and the swap details.
What Muun cannot see: They do not require your name, email, phone number, or any personal identity to use the wallet. There is no KYC. So while Muun can see all your transaction data, they cannot directly link it to your real-world identity unless you volunteer that information.
How this compares: Phoenix runs its own Lightning node on your phone, so ACINQ (the company behind Phoenix) sees less of your transaction history. Zeus can connect to your own node over Tor, giving you full verification independence. Sparrow Wallet on desktop with your own node reveals nothing to any third party. Muun sits at the lower end of the privacy spectrum for self-custodial wallets. If privacy is a priority, Muun is not the right choice.
First setup (under 2 minutes): Download Muun from the App Store or Google Play. Open it. Tap "Create a new wallet." That is it. No email, no phone number, no account creation screen. Muun generates your keys on-device and shows you the main wallet screen immediately. The app then prompts you to create your emergency kit backup. Do it now, not later. If your phone dies before you back up, your Bitcoin is gone.
The main screen: You see your balance at the top, a "Send" button, a "Receive" button, and your transaction history below. That is the entire interface. No tabs, no hamburger menus hiding features, no settings buried three levels deep. Muun bet everything on simplicity and it works. Grandparents can use this wallet.
Receiving Bitcoin: Tap "Receive." Muun shows you a QR code with a unified address. The address works for both on-chain and Lightning payments. Copy it, share it, or let the sender scan it. On-chain payments arrive and wait for confirmations as normal. Lightning payments arrive almost instantly. You do not need to choose between the two.
Sending Bitcoin: Tap "Send." Scan a QR code or paste an address. Muun auto-detects whether it is an on-chain address, a Lightning invoice, or a LNURL. Enter the amount (if not pre-filled by the invoice). Muun shows you the total fee before you confirm. Tap "Confirm." Done. The fee preview is important because it is your chance to see the submarine swap cost before committing.
Transaction confirmation UX: After sending, Muun shows the transaction in your history with a pending status. For on-chain transactions, you see confirmation progress as blocks are mined. For Lightning payments, the status updates to "completed" within seconds. The app does not show mempool position, fee rate details, or RBF options. It is intentionally simplified.
This is a question every Bitcoin wallet user should ask. If the product is free, how does the company survive? Muun's answer is the submarine swap margin.
When you send or receive a Lightning payment through Muun, the swap process includes a small fee that goes to Muun on top of the on-chain mining fee. This margin is not separately itemized in the app. When you see "network fee: 5,000 sats" before confirming a payment, some portion of that goes to miners and some goes to Muun as the swap facilitator. The exact split is not transparent.
Muun has also received venture capital funding. The company is based in Buenos Aires, Argentina, and has raised investment to fund development. The long-term plan appears to be sustaining the business through swap revenue at scale.
There is no subscription fee, no premium tier, and no data monetization. Muun does not sell your transaction data or show ads. The swap margin is the primary revenue source. This is a legitimate business model, but it means Muun's financial incentive is for you to make more Lightning transactions (which generate swap revenue), even though that is the exact use case where Muun costs you the most.
Muun handles UTXO selection and consolidation automatically. When you receive multiple on-chain payments, each creates a new UTXO. When you spend, Muun selects which UTXOs to combine based on its own algorithm. You have no visibility into this process and no control over it.
This matters more than most beginners realize. If you receive 20 small deposits over time (say, weekly DCA from an exchange), you end up with 20 separate UTXOs. When you eventually spend a large amount, Muun must combine many of those UTXOs into a single transaction. Combining UTXOs costs more in fees because the transaction is physically larger. A transaction spending 10 UTXOs costs roughly 5x more in fees than one spending 2 UTXOs.
Muun does not offer manual UTXO consolidation during low-fee periods, which is a common optimization strategy. Wallets like Sparrow or BlueWallet let you consolidate dust UTXOs when fees are cheap (1 sat/vB weekends) so that future spends are cheaper. Muun does not give you that option.
App performance: Muun is fast. The app opens in about 1 second, balance displays immediately, and transaction history loads without noticeable delay. QR scanning is responsive. There is no lengthy blockchain sync on startup because Muun uses its own servers for balance lookups rather than syncing a local copy. This server-dependent model is a privacy tradeoff, but it does result in a snappy user experience.
Muun maintains near-identical apps on both iOS and Android. The core functionality is the same: send, receive, backup, restore. The UI layout is the same. The backup process is the same. For most users, switching between platforms would feel invisible.
There are minor differences in how the operating systems handle background processes. On Android, Muun can run in the background more freely, which means incoming payment notifications arrive more reliably. On iOS, Apple's strict background execution policies mean notifications can sometimes be delayed or missed if the app has been closed for a while. This is an iOS limitation, not a Muun problem, but it is worth knowing.
The emergency kit PDF delivery works through your device's default email client on both platforms. On Android, you can also save the PDF directly to local storage or a file manager. On iOS, the Files app or AirDrop are options. Either way, get that PDF off your email server and onto a USB drive as soon as possible.
Both apps are open source on GitHub. The iOS app is written in Swift and the Android app in Kotlin. Both are actively maintained with regular updates.
One of the biggest pain points of the Lightning Network is inbound liquidity. On a normal Lightning wallet, you can only receive payments up to the amount of inbound capacity in your channels. If you have a 100,000-sat channel with 80,000 sats on your side, you can only receive 20,000 sats before the channel is full. This confuses beginners and frustrates even experienced users.
Muun sidesteps this entirely because submarine swaps bypass the channel system. When someone sends you a Lightning payment, the swap provider receives it through their own channels (which have plenty of inbound liquidity). Then the swap provider sends you an on-chain transaction. Your ability to receive is limited only by the swap provider's channel capacity, not yours. In practice, this means you can receive any Lightning payment at any time without worrying about channel balances.
This is one of Muun's genuine advantages. Other wallets require you to open channels, wait for them to confirm, and then manage capacity between local and remote balances. Phoenix automates some of this with automated channel management, but you still pay channel-opening fees and occasionally hit capacity limits. Muun never has these issues. The tradeoff, as always, is the swap fee.
Common praise from Reddit and Twitter: Users consistently praise Muun's simplicity. "It just works" is the most frequent positive comment. Beginners especially appreciate that they do not need to understand channels, routing, or liquidity. The emergency kit backup gets positive mentions for its independence from Muun's servers. Several users report successfully recovering funds using the GitHub recovery tool after losing their phone.
Common complaints: The #1 complaint by a wide margin is Lightning fees. During the 2024 fee spike events, users reported paying $5 to $8 for a single Lightning payment. Many felt misled because "Lightning is supposed to be cheap." The second most common complaint is the lack of power-user features: no coin control, no RBF, no labels, no node connection. Power users who outgrow Muun tend to migrate to Phoenix, Sparrow, or Zeus.
The privacy debate: Privacy advocates regularly criticize Muun's server-dependent architecture. The fact that Muun's servers see all your transactions is a non-starter for some. Defenders point out that Muun collects no personal identity data and that the tradeoff enables the simple UX. Both sides have valid points. It depends on your threat model.
Update responsiveness: Muun's team ships regular updates on both platforms. They were early adopters of Taproot (enabling it by default before most competitors) and they respond to bug reports on GitHub. The recovery tool is well-maintained. The community generally views the Muun team as responsive and technically competent, even when they disagree with the submarine swap design choice.
Muun launched in 2019 as an on-chain-only Bitcoin wallet with a focus on simplicity. Lightning support via submarine swaps was added in 2020, which was the update that defined Muun's identity. Since then, the major milestones have been:
The trajectory is clear: Muun is not adding power-user features. They are doubling down on simplicity and reliability. If you want coin control, RBF, or node support, those features are not coming. Muun has made its design philosophy clear, and it is not changing direction.
Here is how Muun stacks up against every major mobile Bitcoin wallet with Lightning support. Each wallet makes different tradeoffs between simplicity, cost, privacy, and control.
| Feature | Muun | Phoenix | Breez | Zeus | BlueWallet |
|---|---|---|---|---|---|
| Self-Custody | Yes | Yes | Yes | Yes | Yes (on-chain only) |
| Lightning Type | Submarine swaps | Native (own node) | Native (Greenlight) | Native (embedded LND) | Custodial or BYO |
| Lightning Fees | High (on-chain rate) | Low (< 1 sat) | Low (< 1 sat) | Low (< 1 sat) | Free (custodial) |
| Channel Management | No (not needed) | Automated | Automated | Manual or auto | No |
| Own Node Support | No | Yes (built-in) | Yes (cloud node) | Yes (embedded + remote) | Yes (LNDHub) |
| Coin Control | No | No | No | No | Yes |
| Taproot | Yes | No | No | No | Yes |
| Open Source | Yes (client only) | Yes (fully) | Yes (fully) | Yes (fully) | Yes (fully) |
| Best For | Beginners | Lightning-heavy users | Podcasters, LN daily | Node operators | Power users |
Muun wins on simplicity and instant usability. Phoenix and Breez win on Lightning cost and privacy. Zeus wins on configurability for node operators. BlueWallet wins on power-user features like coin control. Pick the wallet that matches how you actually use Bitcoin. Not the one with the best marketing.
Muun is a great fit if:
Skip Muun and choose something else if:
Scenario 1: First-time exchange withdrawal. You bought Bitcoin on Coinbase, Kraken, or River. You want to move it off the exchange into your own custody. You have never used a Bitcoin wallet before. Muun is perfect for this. Install, create wallet, copy your receive address, paste it into the exchange withdrawal form. Done. Your Bitcoin is now in your control. From here, you can learn more about cold storage and upgrade later.
Scenario 2: Conference spending wallet. You are attending a Bitcoin conference and want a wallet loaded with spending money for merchants, drinks, and tips. Load Muun with $50-200 worth of Bitcoin before the event. Use it for both on-chain and Lightning payments at merchant booths. The higher Lightning fees do not matter much when you are making 3-5 payments over a weekend.
Scenario 3: Gifting Bitcoin to family. You want to give your parents or siblings their first Bitcoin. Set up Muun on their phone, create the emergency kit backup together, and send them some sats. The simple two-button interface means they will not call you confused every week asking what "inbound liquidity" means.
Scenario 4: Daily Lightning payments. Do not use Muun for this. If you are buying coffee every morning, paying for VPN subscriptions with Lightning, or streaming sats to podcasters, the submarine swap fees will add up to hundreds of dollars over a year. Use Phoenix or Breez instead. Seriously.
Muun earns a 7.5/10. It is the best onboarding experience in self-custodial Bitcoin. No other wallet takes you from zero to self-custody as fast, as simply, or with as little technical knowledge required. The unified on-chain and Lightning balance is brilliant for beginners. The emergency kit backup, while more complex than a seed phrase, provides genuine independence from Muun's servers. The open-source mobile apps and recovery tool build real trust.
The score is held back by two things. First, Lightning fees. Submarine swaps are an elegant technical solution that creates a terrible fee experience during high-congestion periods. Paying $3-5 for a Lightning payment that costs less than a penny on Phoenix is hard to justify. Second, privacy. Muun's server dependency means the company can see all your transactions, balances, and addresses. No own-node support, no Tor, no privacy features.
Use Muun as your first wallet, your family onboarding wallet, or your small-balance spending wallet. Do not use it as your primary Lightning wallet if you make frequent payments. And definitely do not use it as your savings wallet. For that, get a hardware wallet.
Self-custodial Bitcoin and Lightning in one app. Free to download on iOS and Android. Just do not use it as your daily Lightning wallet unless you are OK with the fee premium.
Yes. Muun is fully self-custodial from the moment you open it. You control your private keys through a 2-of-2 multisig setup where your phone holds one key and Muun servers hold the other. The emergency kit backup contains both keys (the second encrypted with your recovery code), so you can recover independently if Muun disappears. The open-source recovery tool on GitHub lets you extract funds without any Muun infrastructure.
Muun uses submarine swaps to convert between on-chain Bitcoin and Lightning payments. Every Lightning payment involves an on-chain transaction under the hood, which means you pay on-chain miner fees plus a small routing fee. During high-fee periods, a Lightning payment through Muun can cost $3 to $5 or more. Native Lightning wallets like Phoenix or Breez keep payments inside Lightning channels, so their fees stay well under a penny for most transactions.
The emergency kit is a two-piece backup system. Piece one is an encrypted PDF that Muun emails to you during setup. It contains your wallet keys and transaction data in encrypted form. Piece two is a recovery code you write down on paper. You need both pieces together to restore your wallet. Neither works alone. Store the PDF on a USB drive (not just in your email inbox) and the recovery code on paper in a separate physical location.
No. Muun does not support connecting to your own node. All transaction broadcasting and balance lookups go through Muun servers. This means Muun can see your IP address, transaction amounts, and receiving addresses. For most casual users this is acceptable, but if you care about verification independence or privacy, wallets like Sparrow (desktop) or Zeus (mobile, via Tor) are better choices.
No. Muun handles UTXO selection and consolidation automatically behind the scenes. You cannot choose which coins to spend, label transactions, freeze specific UTXOs, or batch multiple payments into one transaction. Power users who need granular control over inputs and outputs should look at Sparrow Wallet for desktop or BlueWallet for mobile.
Phoenix is a native Lightning wallet with much lower fees for Lightning payments, typically under 1 sat per payment. But Phoenix requires opening a channel first, which costs around 1% of the initial amount plus a minimum fee. Muun works instantly with no channel setup. For frequent small Lightning payments, Phoenix saves you real money. For occasional use where simplicity matters more than fee savings, Muun is easier to start with.
Partially. The mobile apps for iOS and Android are fully open source on GitHub at github.com/muun. The recovery tool is also open source. However, the server-side components are closed source. This means you can audit the code running on your phone but cannot verify what runs on Muun servers. This is a common pattern in mobile wallet design but worth knowing about.
No. Muun is a mobile hot wallet. Your private keys live on a device connected to the internet that runs other apps and could be compromised. For any amount you would be upset to lose, use a hardware wallet like a Trezor, Coldcard, or BitBox02. Think of Muun as your spending wallet for day-to-day transactions, not your savings vault.
Yes. Muun was one of the first wallets to support Taproot addresses (bc1p...). Taproot transactions offer slightly lower fees and better privacy characteristics compared to older address formats like legacy (1...) or SegWit (bc1q...). Muun enables Taproot by default for all new receiving addresses.
Your Bitcoin is safe as long as you have your emergency kit. Muun publishes an open-source recovery tool on GitHub that works entirely without Muun servers. You download the tool, provide your encrypted PDF and recovery code, and the tool extracts your private keys so you can move funds to any other wallet. This process is tested, documented, and does not depend on any Muun infrastructure.
Muun earns revenue through the submarine swap process. When you send or receive a Lightning payment, the swap includes a small margin that goes to Muun on top of the on-chain mining fee. This margin is not separately disclosed in the app. It is built into the total fee you see when confirming a transaction. There is no subscription, no premium tier, and no data selling.
Nearly identical. Both platforms share the same core features: on-chain and Lightning support, emergency kit backup, Taproot addresses, and the same clean two-button interface. Minor differences exist in notification handling and background refresh behavior, but for daily use the experience is functionally the same on both platforms.
How Lightning works, why it matters, and how to start using it for fast payments.
Hot wallets, cold wallets, custodial vs self-custodial. Complete breakdown.
Side-by-side look at every major Bitcoin mobile wallet on the market.
What your 12 or 24 words actually do and how to protect them properly.
Why fees change, how to estimate them, and practical tips to pay less.
How to move your Bitcoin offline for maximum security with hardware wallets.
Custodial Lightning app with free payments. Very different tradeoffs from Muun.
Open-source hardware wallet with color touchscreen. For long-term Bitcoin storage.