A desktop wallet for Zcash funds that a group controls together.
Cyze puts a graphical interface on ZF FROST threshold signatures, built on the Zcash Foundation's frost-tools. A group jointly controls a shielded Zcash wallet: no one ever holds the full private key, and a threshold of members (for example 2 of 3) must approve every payment. On top of that, groups get Safe-style tools to run a treasury together.
Cyze has not been security-audited, and its Zakura wallet crates are still release candidates. Don't hold funds you can't afford to lose, back up your key shares and recovery code, and start on testnet. No warranty is provided.
Mainnet activates NU7 at block 3,543,405 (around November 5, 2026). Cyze 0.3 supports it; earlier versions can't send on mainnet after that.
- A shared shielded wallet: receive, send one payment, everything, or up to 20 at once, and export the history as CSV. It syncs in the background, optionally over Tor.
- Verified approvals: each approver's app checks the transaction itself (inputs, recipients, amounts, change) before showing it.
- Coordination:
- shared payees, and reasons on payments;
- polls, including payments the group agrees to make;
- scheduled payments;
- rules every member's app enforces: trusted payees only, more approvals or a veto window for larger payments, and automatic approval within a spending limit.
- Groups:
- create or join with one invite code;
- contacts with safety codes;
- private viewing keys;
- read-only access for accountants;
- changing members or the threshold.
- Recovery: a passphrase or a 12-word recovery code, encrypted backups, and repair of a member's lost share without moving the funds.
- Votes: group polls and Zcash community votes.
The full list is in Features.
Download an installer from the Releases page, or build from source. Builds aren't code-signed yet, so macOS and Windows show a warning the first time you open the app.
- Set a passphrase and save the one-time recovery code.
- Start a shared wallet: add each member's contact code, choose how many must approve, and click Create invite.
- Members paste the invite and click Join. The wallet opens on Home for everyone.
- Each member saves a backup from Settings → Security.
- Send asks the members you choose. They approve under Approvals.
The user guide covers every feature step by step.
- The full key never exists in one place. Each member's share sits in a keystore encrypted under their passphrase and recovery code.
- Approvers sign the transaction they verified, not a description of it.
- Each member's app finds the group's payments under a private viewing key. The servers are untrusted relays, and members' messages are end-to-end encrypted.
- Rules are enforced by members' apps, not on chain. They hold unless as many members as a payment needs act together.
More detail is in the security model, privacy and how it works. To report a vulnerability, see SECURITY.md.
| Document | What's in it |
|---|---|
| User guide | Every feature, step by step |
| Features | Everything Cyze does |
| How it works | Groups, sync, payments, group records |
| Security model | Keys, privacy, approvals, servers |
| Voting | Group polls and Zcash community votes |
| Privacy | What the app sends, to whom, and what it keeps |
| Development | Building, tests, code layout |
| Releasing | Packaging, sidecars, code signing, SBOMs |
| Sync design | How the wallet syncs, with measurements |
| Changelog | What changed in each version |
npm install
./scripts/build-sidecar.sh # required: fetches the frostd and cloudflared sidecars
npm run tauri devPrerequisites, tests and the code layout are in Development.
MIT. The software Cyze is built on, including the bundled frostd
and cloudflared, keeps its own licenses. Settings → About lists them with
their texts, and each release carries SBOMs.