Post-quantum money, behind a double-click.

0Download, verify, run

# PowerShell — the hash must match the one published on the release and above
Get-FileHash .\HashKinetics-Wallet.exe
# → 6120771FBEDB03100A300ADE9993636E2689565A285FBF9ABB673471D0E94F87   (v0.15.0)

Windows SmartScreen will warn on first run (the build is unsigned): More info → Run anyway. Don't trust the popup either way — trust the hash. No installer, no registry, no admin rights. The wallet talks to rpc.hashkinetics.org (the chain), faucet.hashkinetics.org (test funds) and prover.hashkinetics.org (proofs).

# Android — same rule, two checks: the file hash and the signer's certificate
sha256sum HashKinetics-Wallet-android-0.3.0.apk
# → 59f518ce514c298a7d539e0fae9387e4d395e001038d2f61df872cd8dbc41c90
apksigner verify --print-certs HashKinetics-Wallet-android-0.3.0.apk
# → Signer #1 certificate SHA-256 digest: b296799ed6bea902f6a30ed3bcd497adce7374eb15ec9f8d587ef0575902d6d3

The APK is signed with the HashKinetics release key (certificate valid to 2054), so every later version installs over this one in place; a build whose signer digest differs is not ours. Sideload: Android 8.0 or newer on a 64-bit phone — download, allow "install unknown apps" for your browser or file manager, install. If a -debug build from a workflow artifact is on the phone, uninstall it first (different key; that deletes its testnet wallet).

1Create my wallet (or restore from a seed)

Create my wallet generates a fresh seed on your machine and derives your account id. Restore from a seed (the collapsible below it) takes a 64-hex seed from a backup; the wallet refuses to overwrite an existing wallet file. The header shows which network you are on: wallet · hashkinetics-1-4e4ea68d.

2The main screen

ACCOUNT — your 64-hex id, copy id, view on explorer. BALANCE — with the chain's fee policy on the line below. ↻ Refresh / Get test funds. SEND A PAYMENT. The SHIELDED panel (collapsed until you need it), Backup & advanced, and the ACTIVITY log where every action gets its receipt and a link into the explorer.

3Get test funds

Get test funds asks the faucet to create your account on-chain (your first transaction is paid by the faucet's treasury) and drip 0.100000. The balance updates within a few seconds. One drip per address per 24 hours — a second click shows the cooldown, which is a limit, not an error.

4Send a transparent payment

Paste the recipient's account id, type an amount — the line below shows exactly what leaves your account: = 5000 micro + 100 fee. max fills in balance − fee; anything above it greys out Send with exceeds balance + fee. Then Send: the log shows submitted <txid> and, a few seconds later, ok: 1 event(s) with a view ↗ link.

5Back up — both files

Backup & advanced shows where your keys live: %USERPROFILE%\.hashkinetics\account.json (the transparent seed + ratchet counter; copy seed puts the 64-hex seed on the clipboard — store it offline) and shield.json (created on your first shield; the shielded master plus two counters that must never run backwards). Back up both, and never restore an older shield.json over a newer one — a reused one-time key would leak spend authority. That is why restoring the shielded side from the seed alone is deliberately not offered.

6Shield (hide): transparent → pool

Open the SHIELDED panel, type an amount next to Shield → pool, click. The wallet reserves a one-time spend key, asks the prover for a mint proof, submits, logs the receipt. Proofs take a while — typically 3–15 s, longer under load; the spinner runs, the window stays responsive. Your transparent balance drops by amount + fee; the panel title reads SHIELDED · 0.050000 in 1 note(s).

7Scan the pool · your stealth address

↻ Scan pool downloads the pool's note index and trial-decrypts every note with your key — only yours open. Each note shows LIVE or SPENT, its value, the memo a payer attached, and its commitment. copy my stealth address copies your hkaddr:… — give it to anyone who should pay you privately; nobody can link it to your account id.

8Unshield (show): pool → me

Type an amount next to Pool → me. The wallet picks a note that covers it, proves the spend, and the amount lands in your transparent balance; any remainder comes back to you as a fresh hidden note (change).

9Pay shielded — a private payment with a memo

Paste the recipient's hkaddr:…, an amount and an optional memo, click Pay shielded. The chain sees a nullifier and two new commitments — not who paid whom, not how much. The recipient finds the note on their next scan, memo intact, and can spend it immediately.

10Disclose one payment to one person

Every note has a disclose button. It writes disclosure-<id>.json next to your keys: that note's value, memo and anchor, bound to that single commitment. The other party verifies it fully offline — hk-node verify-disclosure disclosure-<id>.json — and the same file opens zero other notes in the pool. That is the point.