01
Shielded by default
Receive shows a fresh shielded-only address every time, so payers cannot link their payments through it. Transparent funds are one click from the shielded pool.
Zcash walletIronwood (NU6.3)Ready for NU7
Private money, kept in your browser.
Celari is an open-source Zcash wallet that runs entirely in your browser. Payments go to the shielded pool by default, your keys are encrypted on your own device, and there is no account to make. No token, no points, no airdrop promises.
Caution: Early software, not yet independently audited. Use amounts you can afford to lose.
- 600,000
- PBKDF2-SHA256 rounds between your password and your keys
- 24
- words in your recovery phrase, the only backup
- 256
- bit AES-GCM on the phrase and the wallet database
- 0
- scripts on this page: its security policy refuses them
Why Celari
Privacy you can check.
Every claim on this page is in the source, and the build that reaches your browser is pinned file by file.
02
Keys stay on your device
The recovery phrase and the wallet database are stored only encrypted (PBKDF2-SHA256, 600,000 rounds, and AES-256-GCM). The phrase is decrypted to sign and asked for with your password on every spend.
03
Knows the network rules
Before every spend and again before every broadcast, Celari asks which consensus rules the network runs. Around an upgrade such as NU7 it pauses instead of sending a transaction the network would reject.
04
Honest labels
Each payment says whether it is shielded, partly shielded or public, and why. A payment that crosses from an older pool, and so shows its amount on chain, is never called shielded.
05
Locks itself
An idle wallet, or a tab left in the background for a minute, locks. A copied viewing key or recovery phrase is cleared from the clipboard after a minute, as far as the browser allows.
06
Open and reproducible
MIT or Apache-2.0. The wallet engine is built from source in CI, and the WebAssembly that ships must match a list of SHA-256 hashes kept in the repository.
Under the hood
How it works
A light client in the browser: blocks are downloaded from a lightwalletd server and scanned on your device, in WebAssembly.
What stays with you
- Your shielded balance, and who pays you in the shielded pool.
- Your recovery phrase and spending keys: they never leave the browser.
- Your memos: only you and the recipient can read them.
What the server sees
- Your IP address, your transparent addresses and the transactions you broadcast.
- Which transactions are yours, while History fetches them in full (you can turn that off).
- It decides which blocks Celari sees: use a server you trust, or run your own.
The life of a payment
- CreateA PCZT from your notes
- SignWith your password
- ProveIn your browser
- BroadcastThrough your server
Every payment is a PCZT, proved in your browser.
Read this first
Before you start
Not audited yet
Celari and the WebZjs engine it is built on have not had an independent security audit. Start with small amounts.
Your recovery phrase is the only backup
Celari keeps the wallet only in this browser, and browsers can delete site data on their own (Safari after 7 days without a visit, unless Celari is on the Home Screen). Write the 24 words down.
Restoring takes time
Restoring a wallet scans the chain from the month you give. From January 2025 it took about 50 minutes when measured; a start in the 2022-2023 spam era can take a day and several GB of memory.
Some payments are not supported yet
TEX addresses (used by some exchanges) need two linked transactions the engine cannot build yet; the form refuses them rather than failing later.
Ready when you are
A Zcash wallet that keeps your business your own.
Create a wallet in a minute, or restore one from its recovery phrase or a viewing key.