Is Enkrypt: ETH, BTC and Solana Wallet safe?

Low risk

Enkrypt exposes wallet settings, including its analytics UUID, to web pages through its injected bridge.

Enkrypt injects a bridge into every HTTP, HTTPS, and file page, and that bridge can call the wallet settings method from page context. The returned settings include EVM, substrate, Bitcoin, currency, and Enkrypt settings, including the installed timestamp, random analytics user ID, and whether metrics are enabled.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

MyEtherWalletv2.18.0Firefox Add-ons
15Risk
Who publishes it

MyEtherWallet - no other listings under this identity, 17 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
MyEtherWallet

Shared hosts - 17 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

api.testnet.chainweb.com
Also called by 2 other listings, including eckoWALLET
buildnet.massa.net
Also called by 2 other listings: Energy8 Wallet, BearByLegacy
mainnet.massa.net
Also called by 2 other listings: Energy8 Wallet, BearByLegacy
blog.enkrypt.com
Also called by 3 other listings, including Enkrypt
massa.net
Also called by 3 other listings, including Enkrypt
staking.enkrypt.com
Also called by 3 other listings, including Enkrypt
56.rpc.thirdweb.com
Also called by 4 other listings, including Frontrun
api.chainweb.com
Also called by 4 other listings, including eckoWALLET
api.unstoppabledomains.com
Also called by 4 other listings
fusion.1inch.io
Also called by 4 other listings, including Enkrypt
help.myetherwallet.com
Also called by 4 other listings
11155111.rpc.thirdweb.com
Also called by 5 other listings
backupstore.enkrypt.com
Also called by 6 other listings
ccswap.myetherwallet.com
Also called by 6 other listings
enkrypt.com
Also called by 6 other listings
rootstock-testnet.blockscout.com
Also called by 6 other listings, including BitMask
rootstock.blockscout.com
Also called by 6 other listings, including BitMask

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.18.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • See the address and title of every tab you have open

    tabs

  • Read whatever you have copied to your clipboard

    clipboardRead

  • Write to your clipboard

    clipboardWrite

Updated 30 September 2026amo-2760947