Checked on every phone
Your phone checks each payment against the vault’s own keys: recipients, amounts, change and fee. If anything’s off, it won’t sign.
Now on mainnet · beta
The multisig
nobody can see
One private vault for your team. Nothing moves until enough of you approve.
- Shielded on Zcash
- Threshold signatures (FROST)
- Open source
- Tor built in
How it works
Three phones.
One vault.
-
Someone proposes
Anyone in the vault drafts a payment. Nothing moves yet.
-
Everyone checks, then approves
Each phone checks the payment on its own. One tap to approve.
-
It sends itself
Once enough of you approve, it goes. On-chain, it looks like any payment.
Features
Your multisig,
held together
Invisible on-chain
The phones sign together as one. To the chain it’s an ordinary shielded payment, like this real one from our testnet trial.
- tx
- e6ccd6b7…9eef0237
- block
- 4,422,289
- to
- encrypted
- amount
- encrypted
Private all the way
- Optional Tor for every connection
- Encrypted backups
- Viewing keys for auditors
- Unlock your phone to sign
Security
Nothing to take
on trust
-
No single key
The key is split across your phones and never put together, not even to sign.
-
A blind relay
Phones talk through a relay that sees who and when. Never amounts, addresses or keys.
-
No telemetry
No analytics, no crash reports, no third-party SDKs. A build check fails if one is added.
Compare
Not all multisigs
are equal
| Feature | Zafe | On-chain multisig | Single-key wallet |
|---|---|---|---|
| Several people must approve | Yes | Yes | No |
| Balances and payments stay private | Yes | No | If shielded |
| Looks like an ordinary payment | Yes | No | Yes |
Questions?
Is Zafe safe to use?
Zafe is in beta on Zcash mainnet and hasn’t had an external audit yet. The app, the relay and the spec are open source, and the key is never in one place. Start with an amount you’re comfortable with, or try the testnet build first.
Is it really a multisig?
Yes, just not on-chain. Each phone holds a key share (FROST), and enough shares make one ordinary signature.
What can the relay see?
Who messages whom, and when. Never amounts, addresses or keys. It can’t sign or move funds.
Does Zafe track me?
No. There are no analytics, no crash reports and no third-party SDKs, in the app or on this site. If something breaks, the app keeps a scrubbed error log on your phone, and it leaves only if you share it.
What if someone loses their phone?
The vault keeps working while enough members have theirs, and the share comes back from its encrypted backup. Lose too many, and the funds are gone for good.
Can we remove a member?
Not yet. Make a new vault and move the funds.
Which platforms?
Android today, as a direct download from GitHub. Google Play and the App Store are coming; we’ll announce them on X (@zafecash).
More in the spec.
