# Fix Network Privacy during Ironwood Upgrade: NymVPN free for ZCash users during Ironwood **URL:** \ **Category:** General\ **Created:** [July 28, 2026, 1:34pm UTC](https://forum.zcashcommunity.com/t/fix-network-privacy-during-ironwood-upgrade-nymvpn-free-for-zcash-users-during-ironwood/56837 "2026-07-28T13:34:09Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![harryhalpin](https://avatars.discourse-cdn.com/v4/letter/h/df705f/32.png) [@harryhalpin](https://forum.zcashcommunity.com/u/harryhalpin)\ **Post date:** [July 28, 2026, 1:34pm UTC](https://forum.zcashcommunity.com/t/fix-network-privacy-during-ironwood-upgrade-nymvpn-free-for-zcash-users-during-ironwood/56837/1 "2026-07-28T13:34:09Z")
Hey everyone, as noticed by @zooko and Shielded Labs, if you don’t have network-level privacy during the Ironwood update, you risk connecting your unshielded $ZEC balance (as Ironwood upgrade involves unshielding the amount) to your IP address. Also, the timing of your transaction can reveal information about you as well. So in order to **keep your Zcash Ironwood migration balance private** you need to use an anonymizing VPN while doing the upgrade. tl;dr: We’ve made NymVPN, a decentralized VPN and mixnet, free for $ZEC holders who can prove they hold some shielded $ZEC. To install, see [https://zcash.nym.com](https://zcash.nym.com) On that site, you send a nominal amount of $ZEC (like anything, .001 works) and then you get a free NymVPN subscription for a month. After Ironwood, we’ll upgrade it to take in Ironwood transactions. Your subscription is just your private key, you can download NymVPN in an app-store or via the website, Github, etc. - just make sure you “Sign In” with your account’s private key you got from [zcash.nym.com](http://zcash.nym.com). The threat model is a ZCash full node (needed for your lightwallet) or even your local ISP/telco knowing your IP and connecting it to your Zcash Ironwood transaction that reveals your balance. If you want to go deep into threat models, we made a guide for wallet devs that goes deep into it: [https://zcash-sdk.nym.com/](https://zcash-sdk.nym.com/) Here’s the instructions for the Ironwood migration. Note there’s a few subtle points: 1. First, you should probably hide your IP during the initial block sync you do before the Ironwood transaction. An adversary can figure out where you last read the block and connect it to an outgoing a transaction. While some wallets like Zodl support Tor, generally these wallets will not turn Tor on during the block sync as it’s pretty slow. So **with NymVPN, just turn on “Fast mode” before syncing to Zcash blockchain before sending your Ironwood transaction**. That disconnects your IP from your blockchain sync. NymVPN in “fast mode” should be able to handle the blockchain sync. 1. However, you want a _different_ IP address for your Ironwood “Send” than that you used in blockchain sync. Also any timing obfuscation here helps, as this is more sensitive than your blockchain sync. Tor gives you a new IP address about every 10 minutes unless you create a new circuit. In order to _guarantee_ a new IP address for the send, with NymVPN t **urn on “Mixnet mode”, select a new exit gateway, and _then_ send your transactions to Ironwood.** If you wallet allows _multiple_ Ironwood sends, just keep selecting new exists before authorizing each send. 1. After your Ironwood migration is complete, encourage your wallet of choice to integrate network privacy. We at Nym have built all the libraries needed, but we still have not enough wallets integrating them. See here: [Revised Nym for ZCash Network-level Privacy](https://forum.zcashcommunity.com/t/revised-nym-for-zcash-network-level-privacy/46688) And keep using your free NymVPN subscription for all your other tasks to defend yourself and others! ---
**Author:** ![harryhalpin](https://avatars.discourse-cdn.com/v4/letter/h/df705f/32.png) [@harryhalpin](https://forum.zcashcommunity.com/u/harryhalpin)\ **Post date:** [July 28, 2026, 3:02pm UTC](https://forum.zcashcommunity.com/t/fix-network-privacy-during-ironwood-upgrade-nymvpn-free-for-zcash-users-during-ironwood/56837/2 "2026-07-28T15:02:11Z")
OK, unfortunately now with the Ironwood upgrade, zcash-walletd (which we use to prove Zcash adresses) doesn’t work with Ironwood. So the free NymVPN subscription for proof of a shielded Zcash transaction won’t work now ☹ We’ll have it back up as soon as zcash-walletd upgrades. ---
**Author:** ![harryhalpin](https://avatars.discourse-cdn.com/v4/letter/h/df705f/32.png) [@harryhalpin](https://forum.zcashcommunity.com/u/harryhalpin)\ **Post date:** [August 17, 2026, 5:02pm UTC](https://forum.zcashcommunity.com/t/fix-network-privacy-during-ironwood-upgrade-nymvpn-free-for-zcash-users-during-ironwood/56837/3 "2026-08-17T17:02:35Z")
Note we are back up and have been for about two weeks! Please keep making sure your IP address is protected when doing your Ironwood transition.