A New Way
A New Way
To MOVE
To MOVE
MONEY
MONEY
The missing layer of digital cash.
The missing layer of digital cash.
PRIVATE MONEY. ANYWHERE.
EVEN OFFLINE.
EVEN OFFLINE.
Meet the Capsule.
A capsule packages value into a sealed, private object.
Sending one compresses the entire transaction history into a single inbound and outbound event, removing timing patterns, hop sequences, and residual metadata.
A capsule packages value into a sealed, private object.Sending one compresses the entire transaction history into a single inbound and outbound event, removing timing patterns, hop sequences, and residual metadata.
HOW IT WORKS
Move value off-chain. Settle privately on-chain. Leave no trail in between.
ISOLATE
Your wallet derives a fresh ZIP-32 subkey and creates a one-time shielded address that isolates the value from all prior activity.
ISOLATE
Your wallet derives a fresh ZIP-32 subkey and creates a one-time shielded address that isolates the value from all prior activity.
Transfer
The capsule packages this one-time key into an encrypted object that can be passed off-chain without creating any blockchain activity.
Transfer
The capsule packages this one-time key into an encrypted object that can be passed off-chain without creating any blockchain activity.
SETTLE
The recipient verifies the note is unspent and sweeps it into their personal address, leaving only the funding and settlement events on-chain.
SETTLE
The recipient verifies the note is unspent and sweeps it into their personal address, leaving only the funding and settlement events on-chain.
Zcash gives you private money.
Capsules make it move like cash.
SHIELDED for real life
BUILT ON ZCASH. BUILT DIFFERENT.
Send Offline
Hand someone a capsule through Bluetooth. No network required until redemption.
Send Offline
Hand someone a capsule through Bluetooth. No network required until redemption.
No Addresses Needed
Create the capsule alone and pass it however you want. No address exchange and nothing to scan.
No Addresses Needed
Create the capsule alone and pass it however you want. No address exchange and nothing to scan.
Erase Timing Trails
The send happens off-chain. Only the final sweep hits the chain as a clean shielded event.
Erase Timing Trails
The send happens off-chain. Only the final sweep hits the chain as a clean shielded event.
Reliable Anywhere
Dead zones, crowded venues, remote areas, capsules still work. You’re passing a data object, not broadcasting a tx.
Reliable Anywhere
Dead zones, crowded venues, remote areas, capsules still work. You’re passing a data object, not broadcasting a tx.
Platform-Native Transfers
Capsules ride on the phone’s native sharing interfaces, including iMessage and Bluetooth on iOS and expands naturally as new platforms are supported.
Platform-Native Transfers
Capsules ride on the phone’s native sharing interfaces, including iMessage and Bluetooth on iOS and expands naturally as new platforms are supported.
Device-to-Device Value
Move ZEC between your own devices instantly. No syncing, scanning, or on-chain send event.
Device-to-Device Value
Move ZEC between your own devices instantly. No syncing, scanning, or on-chain send event.
Secure
OFF-CHAIN
INSTANT
PRIVATE
TRUSTLESS
SHIELDED
Secure
OFF-CHAIN
INSTANT
PRIVATE
TRUSTLESS
SHIELDED
FAQ
FAQ
Find Your Answers
How much privacy do capsules actually give compared to regular Zcash?
They eliminate timing analysis. With regular Zcash, if Alice sends to Bob then Bob sends to Carol, chain analysts can link those txs by timing. With Zipher, those intermediate transfers don't exist on-chain, so there's nothing to correlate.
How can I receive a capsule offline?
In the simplest sense, capsules are just encrypted files. You can receive them via Bluetooth with zero network connection. The only time you need internet is when you want to verify it's unspent or sweep it onto the blockchain. So you can hand someone a capsule in a remote area with no service, and they can take it home and verify/sweep whenever.
If transactions can happen offline through Bluetooth, how do you prevent double-spends?
Two layers. First, the 7-day restore time-lock: when someone restores their wallet, they're locked out from sweeping for 7 days. So, if they send you a capsule at 9am and restore at 9:05am trying to steal it back, they can't touch anything for a week. Second, Zipher recovery phrases only work in Zipher. If someone tries to import their phrase into another Zcash wallet to access capsule addresses directly and double-spend, it won't work because the phrase generates different addresses in other wallets by design. You're protected both ways: the time-lock buys time, and the closed ecosystem prevents the workaround.
Can one capsule be sent to multiple people?
Yes - once you send a capsule to someone, they can forward it to someone else, who can forward it to another person. It's a true bearer instrument, like handing a $20 bill from person to person. Anyone in the chain can sweep it at any time, and once swept, the capsule is destroyed. For strangers in Craigslist/marketplace transactions, you sweep immediately after verification before handing over goods. For trusted parties, the capsule can pass through multiple hands before someone sweeps it.
Is this just a mixing service?
No - mixing services shuffle existing coins to break past transaction links. Capsules eliminate transactions entirely during transfer. A mixing service might hide that Alice sent coins, but the coins still moved on-chain with timing and metadata. Capsules move value completely off-chain until settlement, so there's no transaction to analyze in the first place.
Is Zipher non-custodial and trustless?
Zipher is fully non-custodial - you control your funds through a 12-word recovery phrase that never leaves your device. No third party, including Zipher or Apple, can access your wallet or funds. But it's not trustless in the traditional crypto sense before you sweep. Capsules require recipient verification, just like checking if a $20 bill is real before accepting it. The app auto-verifies it's a real, unspent note on the blockchain. Once swept, it's trustless - the Zcash protocol guarantees it's legitimate. For strangers you sweep immediately. For friends and family, you might hold it longer, but verification is automatic and continuous. It's trustless once settled, but the human layer before that requires the same due diligence you'd use with physical cash.
How much privacy do capsules actually give compared to regular Zcash?
They eliminate timing analysis. With regular Zcash, if Alice sends to Bob then Bob sends to Carol, chain analysts can link those txs by timing. With Zipher, those intermediate transfers don't exist on-chain, so there's nothing to correlate.
How can I receive a capsule offline?
In the simplest sense, capsules are just encrypted files. You can receive them via Bluetooth with zero network connection. The only time you need internet is when you want to verify it's unspent or sweep it onto the blockchain. So you can hand someone a capsule in a remote area with no service, and they can take it home and verify/sweep whenever.
If transactions can happen offline through Bluetooth, how do you prevent double-spends?
Two layers. First, the 7-day restore time-lock: when someone restores their wallet, they're locked out from sweeping for 7 days. So, if they send you a capsule at 9am and restore at 9:05am trying to steal it back, they can't touch anything for a week. Second, Zipher recovery phrases only work in Zipher. If someone tries to import their phrase into another Zcash wallet to access capsule addresses directly and double-spend, it won't work because the phrase generates different addresses in other wallets by design. You're protected both ways: the time-lock buys time, and the closed ecosystem prevents the workaround.
Can one capsule be sent to multiple people?
Yes - once you send a capsule to someone, they can forward it to someone else, who can forward it to another person. It's a true bearer instrument, like handing a $20 bill from person to person. Anyone in the chain can sweep it at any time, and once swept, the capsule is destroyed. For strangers in Craigslist/marketplace transactions, you sweep immediately after verification before handing over goods. For trusted parties, the capsule can pass through multiple hands before someone sweeps it.
Is this just a mixing service?
No - mixing services shuffle existing coins to break past transaction links. Capsules eliminate transactions entirely during transfer. A mixing service might hide that Alice sent coins, but the coins still moved on-chain with timing and metadata. Capsules move value completely off-chain until settlement, so there's no transaction to analyze in the first place.
Is Zipher non-custodial and trustless?
Zipher is fully non-custodial - you control your funds through a 12-word recovery phrase that never leaves your device. No third party, including Zipher or Apple, can access your wallet or funds. But it's not trustless in the traditional crypto sense before you sweep. Capsules require recipient verification, just like checking if a $20 bill is real before accepting it. The app auto-verifies it's a real, unspent note on the blockchain. Once swept, it's trustless - the Zcash protocol guarantees it's legitimate. For strangers you sweep immediately. For friends and family, you might hold it longer, but verification is automatic and continuous. It's trustless once settled, but the human layer before that requires the same due diligence you'd use with physical cash.
A New Way
To MOVE
MONEY
The missing layer of digital cash.
PRIVATE MONEY. ANYWHERE.
EVEN OFFLINE.
Meet the Capsule.
A capsule packages value into a sealed, private object. Sending one compresses the entire transaction history into a single inbound and outbound event, removing timing patterns, hop sequences, and residual metadata.
HOW IT WORKS
Move value off-chain. Settle privately on-chain. Leave no trail in between.
ISOLATE
Your wallet derives a fresh ZIP-32 subkey and creates a one-time shielded address that isolates the value from all prior activity.
Transfer
The capsule packages this one-time key into an encrypted object that can be passed off-chain without creating any blockchain activity.
SETTLE
The recipient verifies the note is unspent and sweeps it into their personal address, leaving only the funding and settlement events on-chain.
Zcash gives you private money.
Capsules make it move like cash.
SHIELDED for real life
BUILT ON ZCASH. BUILT DIFFERENT.
Send Offline
Hand someone a capsule through Bluetooth. No network required until redemption.
No Addresses Needed
Create the capsule alone and pass it however you want. No address exchange and nothing to scan.
Erase Timing Trails
The send happens off-chain. Only the final sweep hits the chain as a clean shielded event.
Reliable Anywhere
Dead zones, crowded venues, remote areas, capsules still work. You’re passing a data object, not broadcasting a tx.
Platform-Native Transfers
Capsules ride on the phone’s native sharing interfaces, including iMessage and Bluetooth on iOS and expands naturally as new platforms are supported.
Device-to-Device Value
Move ZEC between your own devices instantly. No syncing, scanning, or on-chain send event.
Secure
OFF-CHAIN
INSTANT
PRIVATE
TRUSTLESS
SHIELDED
FAQ
Find Your Answers
How much privacy do capsules actually give compared to regular Zcash?
They eliminate timing analysis. With regular Zcash, if Alice sends to Bob then Bob sends to Carol, chain analysts can link those txs by timing. With Zipher, those intermediate transfers don't exist on-chain, so there's nothing to correlate.
How can I receive a capsule offline?
In the simplest sense, capsules are just encrypted files. You can receive them via Bluetooth with zero network connection. The only time you need internet is when you want to verify it's unspent or sweep it onto the blockchain. So you can hand someone a capsule in a remote area with no service, and they can take it home and verify/sweep whenever.
If transactions can happen offline through Bluetooth, how do you prevent double-spends?
Two layers. First, the 7-day restore time-lock: when someone restores their wallet, they're locked out from sweeping for 7 days. So, if they send you a capsule at 9am and restore at 9:05am trying to steal it back, they can't touch anything for a week. Second, Zipher recovery phrases only work in Zipher. If someone tries to import their phrase into another Zcash wallet to access capsule addresses directly and double-spend, it won't work because the phrase generates different addresses in other wallets by design. You're protected both ways: the time-lock buys time, and the closed ecosystem prevents the workaround.
Can one capsule be sent to multiple people?
Yes - once you send a capsule to someone, they can forward it to someone else, who can forward it to another person. It's a true bearer instrument, like handing a $20 bill from person to person. Anyone in the chain can sweep it at any time, and once swept, the capsule is destroyed. For strangers in Craigslist/marketplace transactions, you sweep immediately after verification before handing over goods. For trusted parties, the capsule can pass through multiple hands before someone sweeps it.
Is this just a mixing service?
No - mixing services shuffle existing coins to break past transaction links. Capsules eliminate transactions entirely during transfer. A mixing service might hide that Alice sent coins, but the coins still moved on-chain with timing and metadata. Capsules move value completely off-chain until settlement, so there's no transaction to analyze in the first place.
Is Zipher non-custodial and trustless?
Zipher is fully non-custodial - you control your funds through a 12-word recovery phrase that never leaves your device. No third party, including Zipher or Apple, can access your wallet or funds. But it's not trustless in the traditional crypto sense before you sweep. Capsules require recipient verification, just like checking if a $20 bill is real before accepting it. The app auto-verifies it's a real, unspent note on the blockchain. Once swept, it's trustless - the Zcash protocol guarantees it's legitimate. For strangers you sweep immediately. For friends and family, you might hold it longer, but verification is automatic and continuous. It's trustless once settled, but the human layer before that requires the same due diligence you'd use with physical cash.