Is zkID Wallet safe?

Low risk

zkID Wallet lets web pages query whether the wallet is locked.

zkID Wallet injects a page-facing script on HTTP and HTTPS sites and exposes a request interface to those pages. The stored claim says any web page can call the wallet_isLocked method and receive the wallet lock state without prior authorization.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

18Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.5.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Run its own code inside the pages you visit

    scripting

Updated 30 September 2026ahkpfejaeoepmfopmbhjgjekibmfcfgo