How to Shield Zcash
Shielding moves ZEC out of the transparent pool—where addresses and amounts are public—and into a shielded pool, where fully shielded payments do not publish their sender, recipient, or amount on the blockchain.
This walkthrough uses Zodl, the mobile wallet formerly called Zashi. Interfaces change, so compare these steps with Zodl’s current support documentation before moving a meaningful amount.
💡 Key Takeaways
- Update your wallet before receiving ZEC; current versions support the Ironwood shielded pool
- Use a shielded withdrawal when an exchange supports it
- If an exchange requires a transparent address, that deposit and the amount you later shield are public
- Back up your recovery phrase offline and test with a small amount first
- Shielding protects on-chain payment details, not exchange records, devices, IP traffic, or information you reveal
What Shielding Does—and Does Not Do
A transparent Zcash address works much like a Bitcoin address: its on-chain balance and transfers can be inspected. A fully shielded transfer encrypts its payment addresses, amount, and memo while a zero-knowledge proof lets the network verify that the transaction is valid.
Shielding does not erase the transparent transaction that came before it. Moving value between the transparent and shielded pools reveals the amount crossing that boundary. An exchange can also retain your identity and withdrawal record, and network observers may correlate IP traffic or timing.
⚠️ Privacy Is a System, Not a Button
Shielding is an important on-chain protection, not a guarantee of anonymity. Avoid moving a distinctive amount into the shielded pool and immediately sending the same amount back to a transparent address.
Before You Start
- Download Zodl only from zodl.com or a verified app-store listing.
- Install the latest version. Zcash activated the Ironwood/NU6.3 upgrade on July 28, 2026, and old wallet versions may not sync or send correctly.
- Create or restore your wallet and complete the recovery-phrase backup before depositing a meaningful amount.
- Store the phrase offline. Never paste it into a website, support chat, direct message, or cloud note. Zodl cannot recover it for you.
- Start with an amount you can afford to lose while learning the flow.
This guide is educational. It is not financial, legal, or security advice, and it cannot evaluate your personal threat model.
From an Exchange to Shielded ZEC
Option A: The exchange supports shielded withdrawals
In Zodl, tap Receive and copy the shielded address. Paste it into the exchange’s withdrawal screen and confirm that the exchange accepts the address and network before submitting.
A direct shielded withdrawal avoids publishing your wallet’s transparent receiver. The exchange still knows your account, withdrawal amount, destination information it collected, and timing.
Option B: The exchange only accepts a transparent address
According to Zodl’s exchange-deposit guide:
- In Zodl, tap Receive.
- Choose Transparent Address, open the QR-code screen, and copy the address beginning with
t1. - Paste it into the exchange’s Zcash withdrawal form and verify the first and last characters.
- Submit a small test withdrawal and wait for Zodl to show it.
- When Zodl detects the transparent balance, tap Shield, review the transaction, and confirm.
- Wait until the wallet reports the balance as spendable. Zodl’s current documentation requires confirmations before newly received funds can be spent.
The transparent deposit and the amount crossing into the shielded pool remain public. What you do later inside the current shielded pool receives the stronger on-chain protection.
Make Sure You Are Current on Ironwood
Ironwood is Zcash’s current shielded pool. It succeeded Orchard in the July 2026 NU6.3 upgrade after a soundness flaw was found in Orchard.
If you held shielded ZEC before that upgrade, the funds may still be in Orchard. Update Zodl and follow its migration prompt. Zodl offers a Migrate with Privacy option that splits transfers over time; an immediate migration is faster but publishes the full amount crossing between pools at once.
Read Zodl’s current Ironwood migration guide before choosing. The guide recommends enabling its Tor option for additional network-level privacy. Pool migration is different from shielding a new transparent deposit, even though both move value across a public turnstile.
ℹ️ Your Unified Address Can Stay the Same
Modern Unified Addresses begin with u. The same visible address can route to different supported receivers as the network and wallet evolve, so the prefix alone does not tell you which shielded pool holds your funds.
Verify Before Sending More
After shielding or migrating:
- Tap your balance and inspect the pool breakdown. Current funds should appear under Ironwood.
- Wait for the wallet’s required confirmations rather than relying on a fixed time estimate.
- Send a small test payment to another shielded address you control.
- Confirm that the recipient wallet received the expected amount.
- Keep enough value shielded that ordinary spending does not repeatedly cross between public and shielded pools.
Do not use a block explorer as proof that a shielded payment “does not exist.” The chain records the transaction and public fields such as the fee; it encrypts the payment data.
Common Privacy Mistakes
- Reusing an exact amount: Shielding 4.372 ZEC and soon deshielding 4.372 ZEC creates an obvious timing-and-amount pattern.
- Publishing transaction details: Sharing a transaction ID, exact amount, time, or counterparty can undo protections the chain provides.
- Ignoring network metadata: Zcash does not automatically hide your IP address from every network observer. Review the official privacy recommendations.
- Using an outdated wallet: Network upgrades can change which pools and transaction formats are supported.
- Trusting “support” messages: Anyone asking for your recovery phrase or spending key is attempting to take your funds.
- Assuming an exchange forgets: Shielding does not delete KYC, deposit, or withdrawal records held by a service.
Frequently Asked Questions
Does shielding make an exchange withdrawal anonymous?
No. It protects later on-chain payment details, but the exchange may know your identity, withdrawal amount, time, and destination information. A transparent withdrawal is also public before it is shielded.
Should I use a shielded withdrawal when possible?
Usually, a supported shielded withdrawal avoids exposing your wallet’s transparent receiver and a separate transparent-to-shielded step. Confirm that both the exchange and your current wallet support the address and network, and test with a small amount.
How long does shielding take?
It depends on wallet policy, network confirmations, and current conditions. Zodl’s August 2026 documentation requires confirmations before funds become spendable; follow the status shown by the current app rather than an old fixed estimate.
Does a Unified Address beginning with u guarantee privacy?
No. A Unified Address can contain multiple receiver types, and wallet behavior determines which one is selected. Use a current shielded-first wallet and review the transaction before confirming.
Can I migrate Orchard funds later?
Yes. Zodl says Orchard funds do not expire, but recommends moving them to the current Ironwood pool. Migration amounts crossing the pool boundary are public, so review the wallet’s privacy-preserving migration option first.