Settings

Encrypt your credentials with a password and download a backup file.

Restore credentials from a .zenowallet backup file.

Configure the ZenoAuth server URL for credential-based login.

PEM certificates (CA roots) that issuer x5c certificate chains must terminate at to be fully trusted. Without anchors, certificate-based issuers are marked "untrusted chain" even when their signature is valid.

Credentials are stored locally in your browser and only leave your device when you present them. By default they are stored in plaintext IndexedDB; enable at-rest encryption above to protect them with a passphrase. Holder keys are non-extractable WebCrypto keys (not covered by the passphrase). Backup files are always password-encrypted. Note that any code running on this origin can read credentials while the wallet is unlocked.