Your money, unseen.

Private USDC on Arc. One recovery phrase holds all your accounts, on every chain Opaque supports: here, in the extension or on your phone.

Your recovery phrase

These 12 words are your wallet. Anyone who has them can spend everything in it, and Opaque can't bring them back if they are lost. Write them down in order and keep them offline.

I wrote them downOn paper, somewhere only I can find.

Confirm your phrase

Type these three words from your phrase, to be sure it is written down.

Import a wallet

The 12-word recovery phrase of an Opaque wallet, or one account's key (opq1…), from the extension, the website or your phone. Your account and notes are found again on chain.

Recovery phrase or account key

Create a password

It encrypts your recovery phrase, keys and notes in this browser. Opaque asks for it each time it opens, and locks itself after 15 idle minutes. Nobody can recover it: if you forget it, reset Opaque here and restore with your phrase or passkey.

Password (8 or more characters) The same again

Keep it if this browser is cleared

Back this wallet up with a passkey: Touch ID, Face ID, your phone or your password manager. Clear the browser, or open Opaque somewhere new, and the same passkey brings every account back. Opaque keeps only an encrypted copy that it can't open.

Private balanceShielded on Arc

— USDC

Loading notes…

UUSDC

Deposit

USDC at your address becomes private notes.

USDC

Turn USDC that arrives into private notes by itself As notes of 1 to 100 USDC, each hidden among notes its size

Your way out

Each note can leave its pool on its own: no Opaque server, relay or attester is asked. Requests go to a public RPC and bundler through EF's anon-rpc (the Nox mixnet), and this wallet's post-quantum key signs. Two steps, a few minutes apart. The note you take out is no longer private.

Your funds

UUSD CoinPrivate notes on Arc— USDC—

Signing keyIn this browser

Signatures left—

A post-quantum key: each deposit or withdrawal uses one signature, and it rotates itself before it runs out.

Send privately

Private on Arc

USDC

ToAn Arc address.

Wait for stronger privacySettles once privacy conditions are strong, and no later than the time below.

Send now: settles as soon as the network accepts it.

Settle no later thanA latest-settlement deadline, not a scheduled send time.

Paid from your private ETH notes, each sent whole, through the relays: nothing on chain names you. The recipient receives WETH, wrapped ETH, which any wallet or Uniswap turns back into ETH.

ETH leaves your account's address in the open, as an ERC-4337 operation your post-quantum key signs. Only tUSDC goes privately, through the pool.

How a private send works

A ring of eightYour payment proves it owns one of 8 identical notes, never which.
Sealed, through three relaysThe spend is sealed for the settler and travels through three relays. None of them sees both you and the payment.
The pool paysThe recipient is paid from the pool. Your address never shows on chain.

Swap

You pay

You getBalance —

Rate: —
You get at least: —
Route: —
LI.FI fee: —

—seconds left

How a swap works on Arc

The best route, asked privatelyLI.FI searches exchanges for the best price. Opaque's relays ask for you, so LI.FI never sees who you are.
Signed post-quantumYour post-quantum key signs one operation: approve exactly this amount, and swap it.
Public, like a depositThe swap happens at your address on chain. What you get becomes private once it is USDC in your notes.

Contracts

Deploy a contract

Bytecode, with its constructor arguments Salt (any 32 bytes; a new one each time gives a new address)

It will be atPaste its bytecode

Call a contract

Contract Calldata

Deployed from this account

Owned by a post-quantum key

This accountStarting…

Gas money here—

Auto-deposit is on: USDC sent here becomes notes, and contracts need it as gas.

An account for this aloneAccounts → Add account, then Send to its address from your notes. On chain the pool paid it, so nothing ties its contracts to you.
Its bytecode, from forgeforge inspect MyContract bytecode, then the constructor arguments from cast abi-encode "constructor(address)" <this account>, without their 0x. The factory deploys it, so a constructor's msg.sender is the factory: pass this account as the owner.
Every call signed post-quantumThis account's hash-based key signs the deploy and each call after it, such as cast calldata "setFee(uint256)" 5. No classical key ever controls the contract.

Privacy

Your payment hides among 8 identical notes. Every member is shown the same: the wallet never shows which one is yours.

One member signed. No member is singled out.

Pool freshness: —
Pool deposits: —

Relay path · 3 hops

Each payment draws a fresh route from the verified relay directory.

Receive privatelyReading this wallet's stealth key…

Opaque UnseenRead the chain through EF's anon-rpc (the Nox mixnet) instead of Opaque's relays. Your balances, key state and account operations then reach a public RPC and bundler with nothing of ours in the path; only payments cross Opaque's relays. Slower, about a second a read. The wallet reloads. What's this?

If Opaque's servers ever go away or refuse you, your notes still leave their pools.

Names

ENSv2 · Sepolia

Claim a post-quantum ENS name

A name under opaque.eth for this wallet: anyone can pay it by name, and only this wallet's post-quantum key holds it.

.opaque.eth

Post-quantum. Held by this wallet's FORS+C key: only a hash-based signature can move it.
Payable by name. Anyone pays it through ENSv2's UniversalResolver.
Private if you want. With Receive privately on, payments land at one-time addresses only you can find.

Advanced: hold opaque.eth itself

opaque.eth is the parent of every name here. A controller holds it and acts only on a FORS+C signature. The claim code hands that control to one wallet, so the team can show a top-level ENS name run by a post-quantum key. You don't need it for your own name.

opaque.eth

Reading opaque.eth on ENS…

code

Swap

You pay

EETH

You getBalance —

0UtUSDC

Rate: —
You get at least: —
Pool: Uniswap v4 · ETH/tUSDC · 0.30%
Who can trade: Post-quantum accounts only

How a swap works on Sepolia

A pool only post-quantum accounts can useIts Uniswap v4 hook checks who is trading. This wallet's account gets in; an ECDSA wallet is refused with NotPostQuantum.
Quoted from the pool itselfIts price and liquidity, read from Uniswap's PoolManager across Opaque's relays.
Signed post-quantumOne operation this wallet's FORS+C key signs; the public bundler submits it.
Then privatetUSDC that arrives becomes private notes by itself.

Activity

What this account did, as this browser saw it: private payments, names, swaps, deposits and public sends.

Private on ArcYour key and notes stay in this browser. Opaque never connects to another wallet.

Arc mainnet

Please don't deposit here yet

Opaque on Arc mainnet uses real USDC, and its contracts haven't been audited yet. Until they are, we don't recommend depositing. Testnet works the same way, with test funds that have no value.

Try Arc testnet Try XRPL testnet

Private transfer

Sending privately

Your transfer is moving through the privacy flow. Keep this window open until submission completes.

Account funding

Depositing privately

Your USDC is being converted into fixed-denomination notes. Keep this window open until submission completes.

Send

Private ETH

Make ETH private

The ETH at your address is wrapped to WETH and deposited as private notes, in one operation your post-quantum key signs. Notes come in 0.0005, 0.001 and 0.005 ETH, and each pool already holds a ring of deposits, so they can be sent at once.

Amount (ETH)As 1×0.001 ETH notes.

Receive on Arc

Your Opaque account

One address for every payment to this account: share it as often as you like. Only its post-quantum key can move what it holds. Send USDC here from any wallet or exchange (Opaque never connects to one); Deposit turns it into private notes, and the first deposit also sets the account up on chain.

Starting…

View on explorer

This wallet

Accounts

Recovery phrase

Every account above comes from it, on every chain. Import it in the extension, on the website or on a phone, and the same accounts, addresses and notes come back.

Password

Current password New password New password again

Passkey backup

Account key

This account alone, without the phrase: paste it into Import account in another Opaque wallet. Whoever holds it can spend everything in this account.

Recovery phrase

This browser's account has no recovery phrase: only a backup file brings it back. Make a phrase for new accounts that come back anywhere.

This account on Arc

AddressStarting…

Account—

Withdraw everything to

Deployers

Fresh Arc addresses for deploying contracts and running scripts. Fund one privately from your notes, then put its key in your project's .env: on chain the pool paid it, and nothing ties it to this account. Use a new one per project.

Backup file

This browser's account keys and private notes exist only here. A backup holds both, encrypted under this passphrase: without it nobody can open the file, you included.

Passphrase (12+ characters)