Enkrypt

Enkrypt

Chrome
·
v2.13.1
·
Last updated on Jan 12, 2026

Security Score

57.1

dApp Permissions

21.1 / 35

User confirmation before processing requests

8.7 / 8.7
Description
Requires user confirmation before processing requests from dApps for specific RPC methods.
- The wallet requires user confirmation for each dApp request. However, for wallet_watchAsset, the dApp confirms success, but the token does not appear in the list.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
User consent for dApp access

0.0 / 7.7
Description
Requires user approval before granting dApp access to specific RPC methods.
- It skips connection approval for eth_getEncryptionPublicKey, eth_signTypedData_v4 (for Opensea Listing and ERC20 Permit), and personal_sign requests.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Wallet unlock before requests

5.6 / 5.6
Description
Requires users to unlock it before processing dApp requests when in a locked state.
- It is asking the user to unlock their wallets in every test
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Mismatching EIP-712 chainId detection

3.5 / 3.5
Description
Alerts users or rejects signing EIP-712 messages with a mismatched chain ID.
- The wallet refuses to sign an EIP-712 message with a chainId that does not match the currently active chain.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
eth_sign method disabled

3.3 / 3.3
Description
Restricts the use of the deprecated and insecure eth_sign method by default.
- The wallet used personal_sign, converted to bytes.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
Mismatching SIWE domain detection

0.0 / 1.8
Description
Warns users when the domain in a Sign-In with Ethereum (EIP-4361) message does not match the requesting dApp's origin.
- The wallet does not warn users of a domain or scheme mismatch when signing a SIWE message.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Connected dApp management

0.0 / 1.5
Description
Allows users to list and revoke connected dApps.
- The wallet does not provide a list of connected dApps and only allows disconnection from the currently active dApp if the tab is open.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Token approval management

0.0 / 1.5
Description
Allows users to view and revoke token approvals.
- The wallet lacks token allowance revocation and does not provide a third-party link for this purpose.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
User confirmation before switching chains

0.0 / 1.1
Description
Requires user confirmation before switching the active chain.
- The wallet skips user confirmation before processing the `wallet_switchEthereumChain` RPC request from the dApp. It lets me select the chain to connect to, but when switching it through the DApp, the change goes through without requiring any confirmation.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Nov 14, 2025
Report an issue with this check

Intent Verification

13.2 / 25

Transaction simulation

0.0 / 6.7
Description
Previews the expected outcome by simulating the request execution on the blockchain before signing.
- The wallet does not show all incoming and outgoing assets during a swap or liquidity pool addition on Uniswap.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Clear token approval dialog

6.7 / 6.7
Description
Clearly displays all the key details for ERC-20 Approve requests.
- The approval shows the token and amount, but the contract address is only available in the hidden data hex.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Clear message signing dialog

3.8 / 3.8
Description
Clearly displays all message signature request details without truncating or hiding information.
- The wallet displays full messages in personal sign requests without truncation and shows the verifying contract in the EIP-712 object.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 4 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
EIP-712 message parsing

0.0 / 2.4
Description
Displays human-readable details for EIP-712 signature requests from well-known protocols.
- The wallet displays plain data instead of parsing the EIP-712 object.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 3 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
Invalid address checksum detection

2.2 / 2.2
Description
Warns users when they input addresses with invalid EIP-55 checksums.
- Wallet successfully prevents the user from providing an address with invalid checksums
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Mandatory message review

0.0 / 2.1
Description
Requires users to review all the details before signing a message.
- The sign button is available from the start.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
Links to blockchain explorers

0.6 / 1.2
Description
Consistently provides clickable links to block explorers for all key blockchain identifiers.
- The wallet shows clickable links in the wallet history but not in the transaction preview.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots

Last updated on Oct 21, 2025
Report an issue with this check

Physical Access

20.0 / 20

Seed phrase access control

5.4 / 5.4
Description
Requires authentication to access seed phrases or private keys.
- The wallet supports seed-phrase backup and requires authentication to access mnemonics.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
Manual wallet lock

3.9 / 3.9
Description
Allows users to lock it manually.
- The wallet includes a manual locking button in the settings menu.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Automatic wallet lock

3.4 / 3.4
Description
Verifies wallet auto-locks on inactivity.
- The wallet lacks an auto-lock setting, but it does lock itself after 20 minutes of inactivity.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Robust Authentication

3.3 / 3.3
Description
Uses strong authentication, such as resistance to trivial or commonly-used passwords. Including biometrics and rate limiting in mobile.
- The wallet requires a strong password of at least eight characters.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Clipboard seed phrase leak prevention

1.8 / 1.8
Description
Limits exposure of secrets by restricting or warning on copying seed phrases or taking screenshots.
- The wallet prevents the copying of mnemonics.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Seed phrase access warning

1.8 / 1.8
Description
Warns users of the risk before allowing access to seed phrases or private keys.
- The wallet warns about the risks of sharing or revealing mnemonics.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check

Threat Prevention

2.8 / 20

Phishing dApp detection

0.0 / 5.1
Description
Prevents or alerts users about interactions with a known malicious URL.
- The wallet does not issue warnings or alerts when connecting to phishing dApps.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Malicious address detection

0.0 / 5.1
Description
Prevents or alerts users about interactions with a known malicious address.
- The wallet does not alert users when interacting with known scam addresses, such as the Tornado Cash Attacker address.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Trusted dApp detection

0.0 / 3.3
Description
Informs users when interacting with a trusted dApp URL.
- The wallet lacks a verified domain indicator for well-known dApps.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Unknown address detection

0.0 / 2.8
Description
Warns users when interacting with an unknown address.
- The wallet does not inform the user that he is interacting with an unknown address.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Nov 17, 2025
Report an issue with this check
Full dApp URL display

1.5 / 1.5
Description
Clearly displays the full dApp URL in the connection prompt.
- The wallet displays the full URL of the dApp without truncation.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check
Malicious or spam token filtering

1.3 / 1.3
Description
Hides malicious tokens and NFTs by default.
- The wallet effectively filters out spam and scam NFTs.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 2 screenshots

Last updated on Oct 21, 2025
Report an issue with this check
dApp access disclosure dialog

0.0 / 1.0
Description
Informs dApp access to balances, history, and signing requests on connection.
- The wallet’s connection dialog informs users that the dApp can access balance and activity but does not mention transaction approval requests.
  — Verified by Alejo Sequeira at Coinspect
Evidence · 1 screenshot

Last updated on Oct 21, 2025
Report an issue with this check

This ranking is for informational purposes only. It should not be relied on to provide legal, tax, financial, investment, or other types of advice. Coinspect does not guarantee or warrant the accuracy, completeness, timeliness, suitability, or validity of the information provided and will not be responsible for any claim attributable to reliance on errors, omissions, or other inaccuracies of any part of such information.