Sealed.cashDocs
Open the app

Start here

Quickstart

From opening the page to holding shielded value - what happens at each step, what it costs you, and what each step writes to a public ledger.

This is Sepolia. You need test STRK, not real money. Every step below writes a real transaction to a real chain that anyone can read, which is the point: the parts that are public are public, and this page says which ones.

Before you start

  • The Ready wallet. Private actions need a wallet implementing the Starknet privacy wallet API - the part that derives your viewing key on-device and produces the proofs behind a private transfer. Ready is the wallet that does this today. Other Starknet wallets can hold your public funds; they cannot do the private actions.
  • Public STRK for fees. The pool charges a fee per private operation, and it is paid in public STRK from your ordinary balance, not from your shielded notes. If your public STRK is empty, a shielded balance cannot move.

Shield your first balance

  1. Connect Ready and pick the network

    The app defaults to Sepolia before a wallet is attached; once connected, your wallet's own chain id wins. Connecting writes nothing on chain.

  2. Deposit STRK or USDC

    The deposit leg is an ordinary ERC-20 transfer into the pool, so the amount and your address are public. What becomes private is everything after it. On a brand-new account this transaction also deploys the account before depositing, in the same flow.

  3. Your viewing key is generated on your device

    Ready derives it the first time you shield. Sealed's app code never receives or stores it. It is what decrypts your notes - and, on this pool, the same key that authorises spending, which is why there is no view-only version of it to hand to an accountant.

  4. Read your balance

    The balance on your screen is decrypted locally from your notes. An explorer looking at the same pool sees a deposit happened and nothing about what you now hold.

Spend it

A card swipe does not withdraw first and pay second. The authorization, the STRK-to-USDC conversion, the merchant payment and the change re-shield are one transaction - if any leg fails, none of it happened. The swipe takes that apart event by event.

Swipes are processed by a hosted account, which is custodial and can read its own notes. Read the hosted account before you use the card, not after.

Get value back out

Unshielding sends to a public address, and the amount and destination are visible on chain - that is the nature of the public leg, not a shortcoming of this app. Unshielding MAX spends the whole note; the pool fee still has to come from public STRK on top, which is why the app warns before an unshield when your public balance is short.

Funding and exit covers the CCTP route in from Base Sepolia and what it does and does not conceal.