Privacy-first wallets for the Octra Network, built by 0xio Labs.

Install any 0xio client: 0xio.xyz/install

0xio covers a browser extension, a desktop app, a mobile app and developer tools, all built on one privacy stack: fully homomorphic encryption (FHE) for balances and transfers whose amounts stay encrypted on chain. The next extension release adds an EVM wallet on the same recovery phrase.

React 18 + Vite, Manifest V3, with a separate Firefox build. Privacy operations run in the browser through pvac-rs compiled to WebAssembly.

• Private balances: encrypt, decrypt, private sends and claims, with a claim budget that keeps every balance within its recoverable layer limit
• Vault: AES-GCM under a random vault key wrapped by the password (PBKDF2, 900,000 iterations); the unlocked session holds the vault key, never the password
• Required password on first run, optional passkey unlock (Touch ID, Windows Hello, security keys)
• One add-wallet flow: create with a backup check, import a phrase or a private key, watch an address, add accounts from a recovery phrase
• Sites bound to the wallet they connected with; network switches requested by a site need approval
• Domain-separated message signing, so a site cannot pass a transaction off as a message
• Your own node as a network; the 0xio RPC proxy is opt-in and never a fallback
• Tokens and NFT collections, with NFT and token transfers named in history
• Heavy proofs offload to 0xio Desktop when it runs
• English, Indonesian, Chinese, Japanese and Korean

Next release, v3.0.0 (committed, not yet in the stores):

• EVM wallet: one recovery phrase makes the Octra address and one 0x address. Ethereum and Robinhood Chain are built in, custom EVM networks and ERC-20 import are supported, and accounts added from a phrase get their own 0x address
• One history for Octra and EVM, sorted by time
• The bridge inside the wallet: OCT to wOCT, wOCT to OCT, and any chain to OCT through Relay, each step with its own review, and stuck transfers found again from the chains
• EVM for websites: discovery through EIP-6963, connect, personal_sign, typed data and transactions, each with a review
• Contract deploys from websites, on EVM and on Octra, with a review of the code size, the new address and the live fee
• A black and white redesign of the Dim theme

Tauri 2 with a Rust backend and a React front end. pvac-rs runs natively, which makes it the fastest place to build privacy proofs, and it can accelerate the extension on the same machine.

• Full wallet: create, import, send, receive, private balance, claims, NFTs
• Menu bar panel on macOS: balance, send and receive, encrypt and decrypt, claims and a command line, with a review before anything is signed
• Contracts: deploy, call, call-view and verification, with FHE parameters
• Built-in browser for dApps and oct:// circles
• Touch ID and Windows Hello
• Signed updates (minisign), served through 0xio.xyz

React Native 0.86 and Expo SDK 57. pvac-rs ships as native libraries (iOS static library, Android shared library).

• PIN and biometric unlock
• Every send, signature and connection confirmed with a slide before anything is signed
• Private balance with the same rules as the extension and desktop
• dApp browser with tabs, and WalletConnect
• NFT gallery, address book, QR send and receive
• Push notifications
• Five languages

@0xio/sdk connects dApps to any 0xio wallet: connection, public and private transactions, balances, message signing, contract calls, finality tracking and typed events. Framework agnostic, full TypeScript types. The next version, 2.9.0, adds deployContract (needs extension 3.0.0).

npm install @0xio/sdk

import { createZeroXIOWallet } from '@0xio/sdk';

const wallet = await createZeroXIOWallet({
  appName: 'My DApp',
  autoConnect: true,
});

await wallet.connect();

@0xio/pvac ships the privacy primitives on their own (FHE encrypt and decrypt, range and bound proofs, cipher arithmetic, Pedersen commitments) as WASM that runs entirely client-side.

• Mnemonic: BIP39, 128-bit entropy from the Web Crypto API, 12 words.
• Seed: PBKDF2 with HMAC-SHA512, 2,048 iterations.
• Master key: HMAC-SHA512("Octra seed", seed)[0:32], the same on every platform.
• Signing: Ed25519 (TweetNaCl).
• Address: SHA-256 of the public key, Base58, oct prefix, 47 characters.
• EVM (extension 3.0.0): secp256k1 key on the standard path m/44'/60'/0'/0/i from the same phrase. The key is derived for each signature, checked against the wallet's 0x address and wiped after. Private key wallets have no EVM address.

PVAC is 0xio's privacy system on fully homomorphic encryption: encrypted balances that the chain can add without decrypting.

• FHE encrypt and decrypt of amounts
• Range proofs (64-bit) that an encrypted amount is valid without revealing it
• Pedersen commitments for transaction integrity
• Stealth transfers: ECDH one-time addresses the recipient finds by scanning
• Zero proofs for decrypting back to a public balance

pvac-rs implements all of it in Rust (curve25519-dalek, multithreaded proofs and decrypts) and compiles to WASM, iOS, Android and native desktop.

• Extension: AES-GCM vault under a password-wrapped random vault key (PBKDF2, 900,000 iterations).
• Desktop: AES-256-GCM vault file (PBKDF2, 600,000 iterations), key zeroing on lock.
• Mobile: keys in the iOS Keychain or Android Keystore, PIN checked against a PBKDF2 hash, biometrics for unlock.

flowchart TB
    ext["Browser Extension<br/>React + Vite, pvac-rs WASM"]
    desk["Desktop Wallet<br/>Tauri 2 + Rust, pvac-rs native"]
    mob["Mobile Wallet<br/>React Native + Expo, pvac-rs FFI"]
    dapps["dApps<br/>@0xio/sdk, EIP-6963"]
    net["Octra Network<br/>JSON-RPC 2.0, FHE balances, AML contracts"]
    evm["EVM networks<br/>Ethereum, Robinhood Chain, custom chains"]
    svc["0xio services<br/>oracle (price, EVM history), indexer, push, opt-in RPC proxy"]

    dapps --> ext
    dapps --> desk
    dapps --> mob
    ext -. proof offload .-> desk
    ext --> net
    ext --> evm
    desk --> net
    mob --> net
    ext --> svc
    desk --> svc
    mob --> svc

• Browser extension on the Chrome Web Store with full FHE privacy
• Desktop wallet for macOS and Windows with native proofs and signed updates
• Mobile wallet on TestFlight and Google Play open testing
• @0xio/sdk and @0xio/pvac on npm
• Bridge between OCT and wOCT, and any chain to OCT
• One install page for every client at 0xio.xyz/install
• EVM wallet in the extension (one phrase, Octra and 0x addresses, Ethereum and custom networks)
• Bridge inside the extension (OCT and wOCT, any chain through Relay)
• Extension 3.0.0 with EVM on the Chrome Web Store
• @0xio/sdk 2.9.0 (contract deploys) on npm
• Mobile wallet on the App Store and Google Play production (App Store resubmission with v1.3.3)
• Extension on Mozilla Add-ons (in review)
• 0xio DEX on mainnet
• Open-source release after security audits

Users: install any client from 0xio.xyz/install, create a wallet or import your 12-word recovery phrase, and you are on the Octra Network.

Developers: npm install @0xio/sdk, then see the SDK guide.

• Website: 0xio.xyz
• Install: 0xio.xyz/install
• Documentation: docs.0xio.xyz
• X: @0xio_xyz
• GitHub: @0xio-xyz
• Telegram: @Nullxgery
• Email: team@0xio.xyz

0xio Wallet, Desktop and Mobile are proprietary software. Copyright © 2026 0xio Labs. All rights reserved. Unauthorized copying, modification, distribution or use is prohibited.

The legacy 0xio extension (legacy/) remains open source under the MIT License for educational purposes.

0xio is developed and maintained by 0xio Labs. It is built for the Octra Network, but 0xio Labs is an independent company and is not affiliated with Octra Labs. This software is provided "as is", without warranty of any kind. You are responsible for the security of your recovery phrases and private keys.