Zcash Privacy, Explained

Optional, not mandatory

Every Zcash transaction uses either a transparent address (public, exactly like Bitcoin) or a shielded address (private, via zero-knowledge proofs) — and the two can even appear in the same transaction. Nothing about Zcash forces privacy on you, and nothing about it forces transparency either; you decide, transaction by transaction. The full breakdown of how that choice plays out, including t↔z "shielding" and "deshielding", is in Shielded vs. Transparent Zcash Transactions Explained. You can see what's actually publicly observable yourself in the Zcash Explorer — transparent addresses and transactions in full, shielded activity never more than confirmation that it happened.

The cryptography: zk-SNARKs

Shielded transactions rely on zero-knowledge proofs (zk-SNARKs) — a way for the network to mathematically verify that a transaction is valid (the sender had the funds, nothing was double-spent, no coins were created from nothing) without learning who sent it, who received it, or how much moved. Zcash was the first major cryptocurrency to ship this in production, and the underlying proof system has been upgraded three times since launch — for speed, to remove trust assumptions, and most recently to strengthen the shielded pool itself. The full technical version — Sprout, Sapling, Orchard, Ironwood, and what a "trusted setup" actually is — is in How Zcash Works.

The shielded pool and anonymity set

Shielded transactions draw from and deposit into a shared pool of encrypted value — the shielded pool. The bigger and more actively used that pool is, the stronger the anonymity set: more genuinely similar transactions for any single one to blend in with. This is a real, measurable network property, not a marketing claim:

The newest pool is Ironwood. NU6.3 (Ironwood) has been active on Zcash mainnet since block 3,428,143 on July 28, 2026. New shielded activity uses the Ironwood pool; Orchard remains spendable but exit-only. Its governing ZIPs (258, 318 and 326) are still listed as Draft in the official zcash/zips index. That is a document status, not a sign the upgrade is inactive. (See the Zcash Network Upgrade Tracker for the sources behind both.) Ironwood reuses and extends Orchard's own cryptographic design — it isn't a separate, unrelated system — and was introduced after a soundness flaw was found and fixed in Orchard's proof circuit, to fully restore confidence in the shielded pool's supply going forward. Orchard itself still works for spending, just not for new deposits; holders aren't moved automatically, but are encouraged to move funds to Ironwood over time.

Private, but still auditable

A common misconception is that private necessarily means unaccountable. Zcash's shielded addresses support viewing keys, which let a holder prove transaction details to a specific third party — an accountant, auditor, or business counterparty — without exposing anything publicly or giving up control of the funds. This selective-disclosure model is one of the more meaningful differences between Zcash's approach and privacy coins built around uniform, non-selective secrecy. What each kind of viewing key reveals, and why sharing one is a permanent decision, is covered in What Is a Zcash Viewing Key?.

How Zcash compares to other privacy approaches

Zcash isn't the only privacy-focused cryptocurrency, and it isn't the only way to think about financial privacy on a public ledger. Zcash vs. Monero compares Zcash's optional, zk-SNARK-based model to Monero's mandatory, ring-signature-based one. Zcash vs. Bitcoin covers why Bitcoin, despite being widely assumed anonymous, is actually fully public and traceable by default. For what independent research found about linking shielded activity, and what it cannot say about today, read Can Zcash Be Traced?

Sources

The mechanics on this page come from the Zcash Protocol Specification, ZIP 316 (Unified Addresses and Unified Viewing Keys), ZIP 32 (Shielded Hierarchical Deterministic Wallets) and ZIP 310 (Security Properties of Sapling Viewing Keys, a Draft). The live shielded share comes from our own shielded supply methodology.