pocket, what you do not have to take on trust

Nothing here asks you to trust us.

Nobody can change Pocket's contracts, including us.

No owner, no upgrade key, no pause switch. Once deployed, they are fixed.

Nobody can see your amounts, not even us.

Every private transfer is proved on your own machine in about half a second. Pocket has no server, so there is nothing anywhere holding your amounts.

You hold the only key that can read your amounts.

Confidential accounts bind one key that can read them, permanently. Pocket derives yours from your own recovery phrase. Systems like this usually assign one shared key controlled by whoever runs the service.

A website can never reach your private pocket.

Three separate barriers stop it, and the strongest cannot be removed by any change to the wallet: the contract only accepts a private transfer with a proof built from your own keys, and a website has no way to produce one.

Nobody can fake a transaction.

The keys that check every private transfer are locked into the contract when it is created and can never be swapped out.

Pocket checks the transactions other services build for you.

DeFindex and Aquarius build their own. Pocket takes them apart and checks every detail against what you asked for: right destination, right action, your account, never more than you typed.

You cannot pay twice by accident.

If Pocket does not know whether a payment landed, it asks the network about that exact payment instead of sending another one.

Your wallet is encrypted on your device.

Encrypted with scrypt and AES-256-GCM. scrypt is memory-hard, which makes brute-forcing it costly on purpose. Many wallets still use PBKDF2, which is not.

Your keys are yours, and they work elsewhere.

Created on your device, never sent anywhere, and derived to the published standard, so the same recovery phrase opens the same accounts in any wallet that follows it. Including the private ones.

A website can never move your money on its own.

It can ask. Every signature needs your approval, one at a time, and connecting a site never grants it the right to sign. A site cannot even make Pocket pop up; it only gets an answer when you open it yourself.

No telemetry, no analytics, no accounts. Fully open source.

Nothing is collected, so there is nothing to leak, sell, or hand over. Every line is Apache-2.0 and public, so none of the claims on this page have to be taken on trust.

Nothing is downloaded while you use it.

The proving system, the fonts and every icon ship inside the extension. Pocket cannot pull in new code after you install it, so a compromised server cannot change what runs on your machine.

Pocket never asks you to approve something it cannot read.

If the wallet cannot describe a transaction in words, it offers no button to sign it. You never approve a hash you cannot check, and requests it has no honest screen for, like raw message signing, are declined outright.

You can check what has been audited, and by whom.

The confidential contracts and circuits were audited by OpenZeppelin Security, with remediation complete. An external review of the verifier library, our own contracts and the wallet is still to come, which is one of the reasons Pocket runs on Stellar testnet today.

Every claim here is checkable.

The contracts are on chain by address, the keys that verify every proof reproduce hash-for-hash from public circuit source, and the release checks run against the exact package you install.