# Lack of wallet encryption

**URL:** <https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880>\
**Category:** General\
**Created:** [August 27, 2017, 5:11am UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880 "2017-08-27T05:11:05Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![regalasnig](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/regalasnig/32/8661_2.png) [@regalasnig](https://forum.zcashcommunity.com/u/regalasnig)\
**Post date:** [August 27, 2017, 5:11am UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880/1 "2017-08-27T05:11:05Z")

</div>

is there official zcash wallet with encryption up yet? getting sick and tired of keeping my crap on exchange all the time…

---

<div class="post-metadata">

**Author:** ![johnwisdom](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/johnwisdom/32/5836_2.png) [@johnwisdom](https://forum.zcashcommunity.com/u/johnwisdom)\
**Post date:** [August 27, 2017, 5:35am UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880/2 "2017-08-27T05:35:46Z")

</div>

for windows this is the most valid wallet: [https://zcash4win.com/](https://zcash4win.com/)  
don’t keep your coins in exchange wallets, they get stuck easly…

---

<div class="post-metadata">

**Author:** ![regalasnig](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/regalasnig/32/8661_2.png) [@regalasnig](https://forum.zcashcommunity.com/u/regalasnig)\
**Post date:** [August 27, 2017, 5:49am UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880/3 "2017-08-27T05:49:41Z")

</div>

that wallet is unofficial and does not support encryption. also never been updated since 2016…

---

<div class="post-metadata">

**Author:** ![AlexComan](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/alexcoman/32/5673_2.png) [@AlexComan](https://forum.zcashcommunity.com/u/AlexComan)\
**Post date:** [August 27, 2017, 11:13am UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880/4 "2017-08-27T11:13:16Z")

</div>

It’s been updated literally a few days ago @regalasnig (and it’s been kept up to date every time) , @anon47418038 (the one who built the GUI wallet) is an active member of the community.

---

<div class="post-metadata">

**Author:** ![anon47418038](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@anon47418038](https://forum.zcashcommunity.com/u/anon47418038)\
**Post date:** [August 27, 2017, 11:14am UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880/5 "2017-08-27T11:14:21Z")

</div>

newest version was pushed out last thursday, lol

---

<div class="post-metadata">

**Author:** ![anon47418038](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@anon47418038](https://forum.zcashcommunity.com/u/anon47418038)\
**Post date:** [August 27, 2017, 11:14am UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880/6 "2017-08-27T11:14:53Z")

</div>

and if you want zcash on windows, my port is what you’ve got to use…command line or with a GUI

---

<div class="post-metadata">

**Author:** ![regalasnig](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/regalasnig/32/8661_2.png) [@regalasnig](https://forum.zcashcommunity.com/u/regalasnig)\
**Post date:** [August 27, 2017, 3:30pm UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880/7 "2017-08-27T15:30:34Z")

</div>

so even on linux there is still no encryption?? holy shit what is wrong with this coin? massive pump and dump just steal everyones wallet twards the end? rofl

---

<div class="post-metadata">

**Author:** ![m42orion](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/m42orion/32/6603_2.png) [@m42orion](https://forum.zcashcommunity.com/u/m42orion)\
**Post date:** [August 27, 2017, 4:33pm UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880/8 "2017-08-27T16:33:38Z")

</div>

Radix42, please is any recommended procedure tu upgrade from 1.0.10 ?  
thx  
ori

---

<div class="post-metadata">

**Author:** ![anon47418038](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@anon47418038](https://forum.zcashcommunity.com/u/anon47418038)\
**Post date:** [August 27, 2017, 5:47pm UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880/9 "2017-08-27T17:47:03Z")

</div>

Uninstall zcash4win in “Add/Remove Programs” and then just double click the msi file you downloaded for 1.0.11

---

<div class="post-metadata">

**Author:** ![anon47418038](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@anon47418038](https://forum.zcashcommunity.com/u/anon47418038)\
**Post date:** [August 27, 2017, 6:18pm UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880/10 "2017-08-27T18:18:48Z")

</div>

No, there is not going to be some pump and dump, that’s madness and would cause the value to instantly plummet to zero!

The (complicated) reasons that the wallet is not encrypted has to do with how scanning for transactions sent to a zaddress are done, and how that interacts with the startup of zcashd (and all of its forks, so this answer also applied to Komodo, Zclassic, Zero, HUSH (ne zdash), and ZEN and did I miss anyone?

The essence of it is that you can’t tell if a transaction sent to a shielded z-address is to you unless you attempt to decrypt it, so for every txn that has a JoinSplit in it that a node encounters when scanning, rescanning, etc it tries to decrypt it with each of the zaddrs in the wallet. Which is another reason to not make superfluous zaddrs all willy nilly, as they are safe to re-use (with a few caveats that may or may not apply to your use case, but that’s beyond the scope of this response!).

The core ZcashCo devs are in the process of untangling scanning for zaddrs, daemon startup, and getting that refactored out of the code path for wallet encryption and decrption. Until that happens, you can encrypt wallet.dat yourself after shutting down zcashd (command line or gui) and then decrypting it yourself before startup, with any of a large number of 3rd party tools. And/or keep it all on an encrypted disk partition in the first place, but performance for that is of course slower and may or may not work well with a blockchain.

Also be aware that any malware, virus or trojan that could steal your wallet.dat file is also perfectly capable of doing keystroke capture for when you enter the password to decrypt it. Sophisticated attackers trolling for bitcoin/altcoin wallets are rumored to have been spotted doing that in the wild, but I don’t track the latest trends in malware closely, as that’s my my thing.

So for offline storage, encrypt with your tool of choice, and for a hot wallet you run all the time, just realize that an encrypted wallet is largely a false sense of security.

Cheers,

-David Mercer  
Tucson, AZ

---

<div class="post-metadata">

**Author:** ![anon47418038](https://avatars.discourse-cdn.com/v4/letter/a/258eb7/32.png) [@anon47418038](https://forum.zcashcommunity.com/u/anon47418038)\
**Post date:** [August 27, 2017, 6:20pm UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880/11 "2017-08-27T18:20:06Z")

</div>

@paige is there a FAQ with the equivalent of the above laid out clearly (and without any errors I may have unintentionally made in this explanation?) If not please feel free to steal/adapt it, as it comes up quite a lot and I hereby place the above text in the public domain 🙂

---

<div class="post-metadata">

**Author:** ![Voluntary](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/voluntary/32/4343_2.png) [@Voluntary](https://forum.zcashcommunity.com/u/Voluntary)\
**Post date:** [August 27, 2017, 9:53pm UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880/12 "2017-08-27T21:53:24Z")

</div>

Use a hardware wallet if you’re dissatisfied with lack of encryption on the official wallet. Or even a cold storage / off-line / paper wallet.

---

<div class="post-metadata">

**Author:** ![NealJayu](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/nealjayu/32/15100_2.png) [@NealJayu](https://forum.zcashcommunity.com/u/NealJayu)\
**Post date:** [August 27, 2017, 10:37pm UTC](https://forum.zcashcommunity.com/t/lack-of-wallet-encryption/20880/13 "2017-08-27T22:37:26Z")

</div>

Correct! Both the Ledger Nano S and Trezor support Zcash and are the safest way I’ve found to store coins.

Since these hardware wallets support only transparent addresses, you can adopt a process of transfering funds between them and a full node desktop wallet when you wish to conduct private transactions.

By the way, Erik Vorhees recently indicated that with their purchase of KeepKey, you can expect most coins supported on ShapeShift will get added to their hardware wallet, presumably Zcash as well.
