NYMIS

Privacy Resources

Explore tools for protecting your onchain activity and digital identity. Compare what each tool protects, what remains visible, and who you need to trust.

Last reviewed Nymis is not affiliated with any listed project.

  • Privacy Pools

    Privacy tools

    Privacy Pools is a non-custodial protocol for private transfers, swaps, and yield. V2 uses zero-knowledge proofs to conceal activity within a shielded pool, while screening deposits for compliance.

    Best for
    Private transfers and DeFi activity with deposit screening.
    Key limitation
    A centralized screening provider can reject or revoke deposits' eligibility for private transactions.
    View details
    What it protects
    The public link between deposits and withdrawals. V2 also hides the sender, recipient, and amount of transfers within the shielded pool.
    Who can observe your activity
    Public observers can see deposits and withdrawals but not the private activity between them. 0xbow operates the screening service, while independent relayers submit private transactions. Users can operate their own relayer and use anon-RPC to reduce network metadata exposure.
    Privacy mechanism
    Zero-knowledge proofs allow users to transact with shielded balances without revealing which deposits fund their transactions. V2 supports private transfers, swaps, and Aave yield. V1 only supports deposits and withdrawals.
    Trust assumptions
    0xbow operates the Association Set Provider (ASP), which approves deposits and can revoke their eligibility for private spending. L2BEAT currently reports that a single administrative key can upgrade V2's core contracts without delay. According to 0xbow, this is a temporary emergency arrangement, with a multisig planned for October 26, 2026, and a two-week upgrade delay planned for approximately one month later. These changes are not yet confirmed as implemented.
    What remains visible
    Deposit and withdrawal addresses, assets, amounts, and timing remain public. This metadata can enable correlation. Users can exit without ASP approval through a public "ragequit", but doing so reveals the originating deposit.
    KYC requirements
    No identity verification is required by default. Deposits undergo screening and may be rejected.
    Supported networks
    Ethereum, Arbitrum, Base, Optimism, BNB Chain, Robinhood Chain, and Citrea. Supported assets, swaps, and yield opportunities vary by network.
    Additional considerations
    Privacy depends partly on the anonymity set and user behavior. V2 launched in October 2026, so its real-world privacy has limited history. Earlier research by Ethereum Privacy Tools found that address reuse and distinctive transaction amounts weakened privacy for some V1 users.
  • RAILGUN

    Privacy tools

    RAILGUN is non-custodial privacy infrastructure that lets users shield tokens, make private transfers, and interact with DeFi on existing EVM chains using zero-knowledge proofs.

    Best for
    Private token balances, transfers, swaps, and DeFi activity.
    Key limitation
    Deposits, withdrawals, and external DeFi interactions remain publicly visible.
    View details
    What it protects
    Balances and transactions within RAILGUN's shielded system, including the sender, recipient, and amount of private transfers. The link between deposited and withdrawn funds is also concealed.
    Who can observe your activity
    Only users holding the relevant viewing keys can inspect their private balances and transaction history. Broadcasters, wallet providers, and RPC services may observe network metadata, but do not automatically gain access to shielded transaction details.
    Privacy mechanism
    RAILGUN uses zero-knowledge proofs and encrypted notes to maintain private balances. Users can transfer funds privately or interact with public DeFi protocols through transactions that unshield, execute, and reshield funds.
    Trust assumptions
    RAILGUN has no centralized operator with access to everyone's private balances. Its smart contracts are governed by RAIL token stakers through a DAO. L2BEAT describes a seven-day governance exit window, although its permissions data also identifies upgrade paths requiring further verification. Users additionally depend on their selected wallet, broadcasters, and RPC infrastructure.
    What remains visible
    Shielding and unshielding addresses, assets, amounts, and timestamps are public. DeFi interactions expose the tokens and amounts used by the external contracts. Timing and distinctive amounts may allow transactions to be correlated.
    KYC requirements
    No identity verification is required at the protocol level. Private Proofs of Innocence (PPOI) allow users to demonstrate that shielded funds satisfy screening criteria without exposing their transaction history. Broadcasters generally require these proofs, while direct submission can bypass broadcaster screening.
    Supported networks
    Ethereum, Arbitrum, Polygon, and BNB Chain. RAILGUN is accessible through compatible wallets, including Railway.
    Additional considerations
    Privacy depends on the number of users holding the same asset within the shielded system. RAILGUN charges a 0.25% protocol fee for shielding and unshielding, with additional broadcaster and network fees potentially applying.
  • Aztec

    Privacy tools

    Aztec is a privacy-first Ethereum Layer 2 that enables developers to build applications with both private and public functionality. Unlike privacy pools, it supports programmable privacy across entire applications.

    Best for
    Private applications, payments, and experimentation with programmable privacy.
    Key limitation
    The network remains in Alpha, with significant security risks and ongoing protocol upgrades.
    View details
    What it protects
    Private smart contract state, transaction details, and function execution, depending on how each application is designed. Applications can combine private and public functionality.
    Who can observe your activity
    Private functions execute and generate proofs on the user's device, so sequencers and validators do not normally see their underlying private data. Wallets, node providers, and applications may still observe metadata or information users disclose.
    Privacy mechanism
    Aztec uses client-side zero-knowledge proofs and encrypted private state, allowing smart contracts to execute private logic while proving its correctness to the network. Transactions ultimately settle on Ethereum.
    Trust assumptions
    Aztec relies on its protocol's cryptography, a decentralized validator network, governance, and the security of individual applications and bridges. As Alpha software, its implementation and upgrade process are still evolving.
    What remains visible
    Public contract functions and state, transaction-related metadata, and information explicitly revealed by applications. Ethereum bridging activity can also expose relationships between addresses.
    KYC requirements
    No protocol-level identity verification. Individual applications and bridges may impose additional requirements.
    Supported networks
    Aztec Alpha mainnet, settling to Ethereum, and a public testnet. Aztec is not EVM-compatible, so existing Ethereum applications cannot be deployed unchanged.
    Additional considerations
    Aztec's Alpha network supports real transactions and early applications, but it is not yet mature infrastructure. A critical vulnerability affecting its V5 proving system was disclosed in August 2026. A V6 replacement is scheduled for no earlier than October 26, 2026, subject to governance execution. Users should verify the active network version and security status before depositing funds.
  • Tornado Cash

    Privacy tools

    Tornado Cash is a decentralized, non-custodial Ethereum privacy protocol that uses zero-knowledge proofs to break the public link between deposits and withdrawals. Its immutable pools operate without centralized screening or permission.

    Best for
    Private transfers without centralized approval or deposit screening.
    Key limitation
    Privacy depends on the anonymity set and transaction patterns. Tornado-linked funds may face restrictions from centralized services (CEX, offramp...).
    View details
    What it protects
    The public link between a deposit and its subsequent withdrawal. Observers cannot directly determine which deposit corresponds to a withdrawal based on the cryptographic proof alone.
    Who can observe your activity
    No central operator has privileged access to all deposit–withdrawal relationships. Relayers can see the withdrawal details they process, while frontend operators, RPC providers, and network observers may collect metadata that helps correlate transactions.
    Privacy mechanism
    Users deposit fixed amounts into shared smart-contract pools. A zero-knowledge proof allows them to withdraw to another address without revealing which deposit they made. Unlike RAILGUN or Privacy Pools V2, Tornado Cash does not support private transfers within its pools.
    Trust assumptions
    The core pools are immutable and cannot be upgraded or paused by an administrator. Users still depend on the integrity of the original trusted setup, the software interface they use, and any relayer involved. Governance controls certain peripheral contracts, not the core pools.
    What remains visible
    Deposit and withdrawal addresses, pool denominations, and timestamps are public. Small anonymity sets, distinctive timing patterns, or address reuse can undermine privacy despite the cryptographic protection.
    KYC requirements
    No identity verification, centralized deposit screening, or approval process is required by the core protocol.
    Supported networks
    Ethereum mainnet, with fixed-denomination ETH pools and several ERC-20 pools. Other deployments exist, but their current availability and security should be verified independently.
    Additional considerations
    Tornado Cash was removed from US sanctions lists in March 2025. However, developer legal proceedings remain ongoing, and exchanges may still flag or reject Tornado-linked funds. Historical deanonymization research has primarily identified weaknesses in user behavior and transaction metadata rather than the underlying zero-knowledge proofs. Users should also verify the authenticity of the frontend, given past incidents involving compromised interfaces.
  • Curvy

    Privacy tools

    Curvy is a non-custodial privacy payments protocol combining stealth addresses with zero-knowledge proofs. Users can receive payments through a single Curvy ID, shield their funds, and make private transfers without publicly linking their activity.

    Best for
    Compliant private payments, shielded balances, and transfers through a single payment identity.
    Key limitation
    Privacy depends on Curvy's supporting infrastructure, while deposits and withdrawals can still expose transaction metadata.
    View details
    What it protects
    Stealth addresses conceal the connection between incoming payments and the recipient's identity. Within Curvy's Privacy Aggregator, sender, recipient, amount, and token information are hidden, according to Curvy.
    Who can observe your activity
    Public observers can see transactions entering and leaving the shielded system. Anyone can operate supporting services, including relayers, indexers, and name resolution.
    Privacy mechanism
    Each payment can arrive through a Curvy stealth address called a Portal. The difference between a regular stealth address and Curvy's Portal is that funds received by a Portal can only be shielded in Curvy's Privacy Aggregator or returned to the owner if the compliance checks fail (e.g. to the stealth address). Funds then enter Curvy's Privacy Aggregator, which uses encrypted notes and zero-knowledge proofs to support private transfers and shielded balances. Proofs are generated on the user's device.
    Trust assumptions
    Curvy relies on smart contracts and supporting infrastructure, including relayers, indexers, Portal Broadcasters, and name resolution. Its offchain resolver introduces additional metadata trust. Curvy reports that its smart contracts underwent an independent security audit in 2026. All the offchain infrastructure can be permissionlessly and independently operated by anyone, as the reference implementations are open source at github.com/0xCurvy.
    What remains visible
    When first depositing funds (e.g. shielding), the sender and token of incoming payments remain public. When funds are unshielded, the destination address, amount, and token become visible. Transaction timing may allow deposits and withdrawals to be correlated.
    KYC requirements
    No general identity-verification requirements. Portal Broadcasters perform compliance screening before funds enter the shielded system.
    Supported networks
    Ethereum, Arbitrum, Base, Optimism, Polygon, BNB Chain, Linea, Gnosis, Solana, Tempo, and Robinhood Chain. Starknet supports stealth addresses only.
    Additional considerations
    Curvy charges protocol fees of 0.1% for shielding, 0.1% for aggregation, and 0.2% for unshielding.
  • Fluidkey

    Stealth wallets

    Fluidkey is a self-custodial wallet that generates a fresh stealth address for every incoming payment while displaying funds in one unified account. Users can share a single payment identity without exposing their full wallet history.

    Best for
    Receiving salaries, payments, and donations without publicly linking your addresses or balances.
    Key limitation
    Fluidkey can link all your addresses through its viewing key, and spending can reveal connections between them.
    View details
    What it protects
    The public connection between incoming payments to the same recipient. Each payment arrives at a separate address, preventing observers from easily discovering your other payments and combined balance.
    Who can observe your activity
    Fluidkey holds a viewing key that allows it to identify and monitor all addresses associated with your account. Payers and public observers cannot automatically make those connections, although blockchain analysis can reveal them through subsequent activity.
    Privacy mechanism
    Fluidkey generates a fresh Safe smart account for each incoming payment, controlled by keys derived by the user. Funds appear in one interface, and transactions are executed through the user's accounts rather than a shared mixing pool.
    Trust assumptions
    Users retain control of their spending keys, but rely on Fluidkey's closed-source application, viewing-key infrastructure, address resolver, and relayer. Web users signing in with Google or Apple also depend on Privy. An open-source recovery tool provides a way to access funds independently of Fluidkey.
    What remains visible
    Each incoming payment's sender, token, amount, and subsequent transfers remain public. Spending from multiple Safe accounts, shared funding sources, or common withdrawal destinations can reveal that supposedly separate addresses belong together.
    KYC requirements
    No identity verification for standard crypto functionality. Bank transfers and fiat services require verification through third-party providers.
    Supported networks
    Ethereum, Arbitrum, Base, Optimism, Polygon, Gnosis, and BNB Chain. Available through web and mobile applications.
    Additional considerations
    Fluidkey offers optional yield functionality and a Hide Trail feature routed through Houdini, which introduces exchange intermediaries and additional trust assumptions. In a September 2026 analysis, Ethereum Privacy Tools found that approximately 44% of observable Fluidkey Safe accounts could be linked through public transaction patterns. This illustrates how spending behavior can undermine stealth-address privacy without compromising the underlying cryptography.
  • Cloaked

    Stealth wallets

    Cloaked is a self-custodial privacy wallet that generates a fresh address for every payment received through a single name. Its optional Incognito balance integrates Privacy Pools for additional transaction privacy.

    Best for
    Receiving payments through one identity, with optional shielded spending.
    Key limitation
    Cloaked can recognize addresses belonging to your account and observe deposit–withdrawal associations within its managed Incognito service. These associations are not automatically public, and users retain control over which funds they combine.
    View details
    What it protects
    Stealth addresses prevent public observers from automatically linking payments received through the same identity. Incognito additionally conceals the public onchain connection between deposits and withdrawals made through Privacy Pools.
    Who can observe your activity
    Cloaked can recognize addresses associated with your account through its viewing capability. Its managed Incognito service can also observe deposit–withdrawal associations. This does not automatically expose those relationships to public blockchain observers or give Cloaked control over users' funds.
    Privacy mechanism
    Each incoming payment arrives at a fresh stealth address associated with the user's Cloaked name. Users control their spending keys and can choose which addresses to spend from. Incognito integrates Privacy Pools to obscure the public transaction trail.
    Trust assumptions
    Users retain exclusive spending authority. Cloaked's viewing capability supports address generation and balance tracking but cannot authorize spending. The hosted experience depends on Cloaked's software and services; open-source recovery tooling provides independent access to funds.
    What remains visible
    Each payment's sender, token, amount, and subsequent movements remain publicly observable. Users can keep funds from different receiving addresses separate and choose which sources to spend. Combining several addresses in one transaction publicly links them; change outputs can also be followed onchain.
    KYC requirements
    No general identity-verification requirement is documented. Geographic and sanctions screening may apply, and Incognito deposits are subject to Privacy Pools' screening requirements.
    Supported networks
    Ethereum, Base, Arbitrum One, BNB Smart Chain, OP Mainnet, and Robinhood Chain. Privacy Pools availability depends on supported pools, networks, and assets.
    Additional considerations
    Cloaked provides funding-source controls to help users avoid combining unrelated funds. Users can also recover their keys and withdraw through another Privacy Pools relayer, outside Cloaked's managed withdrawal flow. These options reduce dependence on Cloaked's interface, although using a different relayer does not erase information already observed by Cloaked or other infrastructure providers.
  • Jumper Private Swaps

    Private swaps

    Jumper integrates Houdini Swap to offer private cross-chain swaps and transfers. Funds are routed through separate exchange partners, breaking the direct public link between sending and receiving wallets without requiring a privacy pool.

    Best for
    Swapping or bridging assets without publicly linking source and destination wallets.
    Key limitation
    Privacy relies on exchange intermediaries that process transactions and have access to route information.
    View details
    What it protects
    The direct public blockchain connection between the sending and receiving wallets. This helps prevent straightforward wallet linkage through ordinary swaps and bridges.
    Who can observe your activity
    Houdini coordinates the swap, while its exchange partners process individual parts of the route. These parties may retain transaction information and disclose it when legally required. Public observers can still see the incoming and outgoing transfers separately.
    Privacy mechanism
    Houdini routes transactions through two exchange partners and an intermediary blockchain. This separates the source and destination transfers without relying on shielded pools or zero-knowledge proofs.
    Trust assumptions
    Users depend on Houdini's routing infrastructure and the exchange partners executing the transactions. Houdini states that it never takes custody of funds itself, but the custody and data-retention practices of its exchange partners are not independently established.
    What remains visible
    The source transaction, destination transaction, amounts, assets, and timestamps remain public on their respective chains. Timing and amount analysis may still provide correlation clues, even where no direct transaction path exists.
    KYC requirements
    No account or identity verification is required for the standard private-swap flow, according to Houdini. Exchange partners perform AML/KYT screening, and additional checks or transaction restrictions may apply.
    Supported networks
    Jumper's private-swap integration launched in June 2026 with support for more than 15 chains. Available networks, assets, and routes depend on Houdini's exchange partners.
    Additional considerations
    Private routes may take longer and incur different costs than standard swaps. Houdini states that its private transactions are capped at $100,000. The service protects against direct public wallet linkage, but should not be interpreted as complete anonymity from intermediaries or resistance to every form of transaction correlation.
  • Bungee Incognito

    Private swaps

    Bungee Incognito enables private swaps, transfers, and bridging by breaking the direct onchain link between sending and receiving wallets. It integrates privacy-focused routing into Bungee's existing cross-chain swap interface.

    Best for
    One-off private swaps and transfers between otherwise linkable wallets.
    Key limitation
    The underlying routing provider and custody arrangements aren't fully documented by Bungee.
    View details
    What it protects
    The direct public onchain connection between source and destination wallets, reducing the risk of straightforward wallet linkage through swaps and bridges.
    Who can observe your activity
    Bungee and its routing intermediaries may access transaction information. Third-party integrator documentation identifies Houdini and centralized exchanges as participants, but Bungee hasn't independently confirmed the complete arrangement.
    Privacy mechanism
    Transactions are routed through intermediaries that separate incoming and outgoing transfers. Integrator documentation describes an exchange-based system powered by Houdini rather than shielded pools or zero-knowledge proofs.
    Trust assumptions
    Users depend on Bungee/SOCKET and the services executing private routes. If the documented exchange-based model applies, intermediaries temporarily handle funds and can observe transaction details. Their custody arrangements and data-retention policies aren't independently established.
    What remains visible
    Sending and receiving transactions, assets, amounts, and timestamps remain public on their respective chains. Timing and amount patterns may still allow correlation, even without a direct transaction path.
    KYC requirements
    Bungee advertises Incognito without mandatory identity verification. However, integrator documentation indicates that compliance screening applies and additional KYC may be requested for flagged transactions or certain jurisdictions.
    Supported networks
    Incognito initially launched on Solana and Polygon in March 2026, with additional networks subsequently announced. Availability varies by asset and route.
    Additional considerations
    Private routes generally take longer than ordinary swaps. Integrator documentation reports typical completion times of 10–30 minutes, with possible minimum and maximum transaction amounts. Incognito should not be confused with cryptographic anonymity: its privacy depends on routing intermediaries and the information they retain.
  • NEAR Confidential Intents

    Private swaps

    NEAR Confidential Intents enables private cross-chain swaps and transfers through a dedicated execution environment. Transaction details stay off public blockchains, helping users protect trading strategies, transaction amounts, and counterparties.

    Best for
    Confidential cross-chain trading and transfers without publicly exposing transaction details.
    Key limitation
    The service operator can access and retain confidential transaction data, and share it with third parties under specified circumstances.
    View details
    What it protects
    Transaction amounts, trading pairs, counterparties, and activity within the confidential environment from public blockchain observers. This helps reduce exposure to transaction monitoring, front-running, and strategy copying.
    Who can observe your activity
    Intents Technology, which operates near.com, can access and retain confidential transaction information. Private-shard validators, solvers, and bridge operators may also see details necessary to process transactions. Information may be shared with analytics providers, screening services, and authorities under the circumstances described in the privacy policy.
    Privacy mechanism
    Confidential Intents executes transactions on a dedicated NEAR private shard operated by permissioned validators. Users move funds into a Confidential balance, where swaps and transfers take place outside public blockchain visibility. Unlike privacy pools, funds are not mixed with those of other users.
    Trust assumptions
    Users depend on the private shard's permissioned validators, its bridge to NEAR mainnet, transaction solvers, and Intents Technology's data-handling practices. The model relies on restricted access to transaction information rather than fully trustless privacy guarantees.
    What remains visible
    Deposits into and withdrawals from the confidential environment leave public blockchain records. Transactions settling on destination chains also expose their public details. These entry and exit records may allow correlation through amounts, timing, or other metadata.
    KYC requirements
    No standard identity-verification step is described for Confidential Mode. Deposits undergo compliance screening, and additional checks or disclosures may apply.
    Supported networks
    Available through near.com and integrations using NEAR Intents. Confidential execution occurs on NEAR's private shard, with cross-chain withdrawals supported wherever NEAR Intents provides compatible routes.
    Additional considerations
    Confidential Mode offers private execution without requiring a separate wallet or client-side proof generation. This makes it convenient for cross-chain trading, particularly when users want to avoid publicly revealing trading strategies. However, its confidentiality guarantees differ substantially from permissionless shielded protocols. NEAR's privacy policy explicitly permits the operator to retain and disclose transaction information for operational, security, compliance, and investigative purposes.
  • nadanada

    Everyday privacy

    nadanada provides privacy-focused VPN, eSIM, and phone-number services without requiring an account, email, or identity verification. Users can pay with Bitcoin, Monero, and other cryptocurrencies for connectivity with minimal personal information.

    Best for
    Private internet access, travel eSIMs, and phone numbers without KYC.
    Key limitation
    Its no-logs policy has not been independently audited, and the service operator's identity and jurisdiction are not clearly disclosed.
    View details
    What it protects
    A VPN masks your IP address from websites and RPC providers while shielding your traffic from your local network and ISP. Its eSIM and phone-number services reduce the personal information needed to purchase connectivity.
    Who can observe your activity
    nadanada's VPN infrastructure can see your connection IP while active, but claims not to retain browsing activity or connection logs. Mobile network operators can still observe device and location data. Payment processors may collect additional information depending on how you pay.
    Privacy mechanism
    nadanada uses WireGuard VPN tunnels, prepaid eSIMs, and rental phone numbers. VPN keys are generated in the user's browser, while account-free purchasing and cryptocurrency payments reduce the need to disclose identifying information.
    Trust assumptions
    Users depend on nadanada's operator, VPN infrastructure, mobile carriers, and relevant payment processors. The VPN's no-logs policy is self-reported, and no independent infrastructure or logging audit was identified.
    What remains visible
    According to its privacy policy, VPN endpoints temporarily retain the connection IP in memory, deleting it after five minutes of inactivity. They also store WireGuard public keys and bandwidth totals. Website logs retain partial IP addresses for seven days. eSIM identifiers, purchased plans, and service records remain available to nadanada. Cellular operators can observe network and location metadata, while cryptocurrency payments may leave a public transaction trail.
    KYC requirements
    No identity verification is required by nadanada for its standard services, according to its published policy. External mobile networks and payment providers may have separate requirements.
    Supported platforms
    Standard WireGuard-compatible devices, eSIM-enabled phones, and web-based ordering. Rental phone numbers are currently offered for the UK.
    Additional considerations
    A VPN shifts trust from your internet provider to the VPN operator rather than providing complete anonymity. For stronger privacy, users should consider their payment method, browser behavior, and the data visible to mobile networks. nadanada states that it does not log browsing activity or DNS queries and only responds to legally valid data requests. These commitments are based on its published policy rather than an independent audit.
  • Fileverse

    Everyday privacy

    Fileverse offers open-source, end-to-end encrypted alternatives to Google Docs and Sheets. Its dDocs and dSheets applications support private document editing, spreadsheets, and collaboration without requiring an account.

    Best for
    Private documents, spreadsheets, and collaboration without relying on Google or Microsoft.
    Key limitation
    Document contents are encrypted, but account information, collaboration metadata, and network activity may remain visible.
    View details
    What it protects
    Document and spreadsheet contents through end-to-end encryption, preventing Fileverse and storage providers from reading users' files. Collaborators can also prove access permissions without revealing their email or wallet address to Fileverse.
    Who can observe your activity
    Fileverse may access document metadata, including file sizes, collaborator information, timestamps, and collaboration-session details for account users. Other participants in peer-to-peer connections may see your IP address, while the contents remain encrypted.
    Privacy mechanism
    Files are encrypted on the user's device before being shared or stored. dDocs and dSheets use local-first storage, support offline work, and offer optional encrypted IPFS storage for sharing and syncing. Fileverse also uses zero-knowledge proofs for selected access permissions.
    Trust assumptions
    Users rely on Fileverse's web applications, encryption implementation, and supporting collaboration infrastructure. The code is open source, and Fileverse states that its cryptography has undergone external audits. Optional IPFS storage introduces additional infrastructure dependencies.
    What remains visible
    For account users, Fileverse may retain file sizes, collaborator identities or references, timestamps, and session metadata. Account sign-in providers may process identity information. Peer-to-peer collaboration can expose IP addresses to other participants.
    KYC requirements
    No identity verification is required. Users can begin without an account, although account creation unlocks additional functionality.
    Supported platforms
    dDocs and dSheets run in desktop and mobile browsers, with offline functionality and optional encrypted storage through IPFS.
    Additional considerations
    Fileverse's local-first design reduces dependence on centralized cloud storage. Its Walkaway recovery tool allows account users with backup keys to retrieve encrypted files independently if the main applications become unavailable. End-to-end encryption protects the contents of documents, but not necessarily who collaborates, when files are accessed, or what network information is exposed.

How to choose

Your goalToolsHow it works
Obfuscate sending/receiving fundsFluidkey, Cloaked, CurvyGenerate fresh addresses to receive and send funds without automatically linking your payments to one wallet.
Fund a fresh addressPrivacy Pools, RAILGUN, Tornado CashUse zero-knowledge proofs to break the public link between the original wallet and a freshly funded address.
Keep DeFi activity privateRAILGUN, Privacy Pools V2, AztecShield balances and transactions to enable private transfers, swaps, yield, or application execution, depending on the protocol.
Quick private swapsJumper, Bungee, CurvyRoute swaps through intermediaries to obscure the public transaction path between sending and receiving wallets.
Keep trades and counterparties confidentialNEAR Confidential IntentsExecute swaps and transfers in a private environment, keeping transaction details off public chains.
Protect your IP addressnadanadaRoute network traffic through privacy infrastructure to reduce IP exposure to websites and RPC providers.
Keep documents privateFileverseEncrypt documents and spreadsheets locally for private editing, storage, and collaboration.

Not sure what your addresses reveal?
Scan them with Nymis, then use Address Linkage to check whether they can be connected.

Key Privacy Concepts

Privacy
Control over what specific observers, such as the public, a counterparty or a service operator, can learn about your activity. Privacy is always relative to an observer: a tool can hide you from the public while its operator still sees more.
Anonymity
An action is anonymous when an observer can't single it out or link it to you among a group of plausible candidates. It depends on the size of that group and on what the observer can see and correlate, so it is rarely absolute.
Anonymity set
The group of possible participants an observer can't tell apart, such as all deposits of the same amount in a pool. A larger set usually improves privacy, but distinctive timing, amounts or behavior can shrink it to a few candidates.
Zero-knowledge proof (ZKP)
A cryptographic method for proving a statement is true without revealing the information behind it. Privacy tools use ZKPs to prove, for example, that a withdrawal is backed by a valid deposit without revealing which deposit funded it.
Transaction metadata
Information surrounding a transaction rather than its contents: timing, amounts, addresses, gas payments, IP addresses and network activity. Even when a tool hides the link between transactions, metadata patterns can still reveal connections.
Stealth address
A fresh address generated for each incoming payment, so payers and observers can't easily connect a recipient's payments or see their total balance. Senders and amounts stay public, funds aren't mixed, and spending from several stealth addresses together can link them.
Shielded pool
A smart contract holding many users' funds, where zero-knowledge proofs hide which deposit funds a later withdrawal or private transfer. Deposits and withdrawals remain public, so privacy depends on the anonymity set and on avoiding distinctive timing or amounts.
Private execution
A network where smart-contract logic and state can themselves be private, with proofs generated on the user's device. Unlike a shielded pool, it can make whole applications private, though each app decides what stays public and bridging can expose activity.
Intermediary routing
Funds pass through third parties, such as exchanges, that send a fresh transfer to the destination. The public chain shows no direct link, but the intermediaries see their part of the route, may hold funds in transit and may keep records.
Viewing key
A key that lets its holder see otherwise private wallet activity, such as balances, incoming payments or transaction history, without being able to spend funds. What it reveals varies by protocol, and some wallet providers hold one for every user.
Association Set Provider (ASP)
In Privacy Pools, the party that decides which deposits may be spent privately, by publishing a list of approved deposits. It can delay or revoke approval; users whose deposits aren't approved can still exit publicly, which gives up privacy for those funds.
KYC and KYT
KYC (Know Your Customer) verifies who you are, usually with identity documents. KYT (Know Your Transaction) screens where funds come from and go, often using blockchain analytics. A service can skip KYC and still screen transactions.

Research & Data

This directory is based on official documentation and independent research. We aim to provide accurate, unbiased information, but inclusion does not imply endorsement. Some links are referral links; these arrangements do not influence our evaluations.

Found an error or outdated information? Let us know on X.