Your data, your terms
Ethereum aims to be a sanctuary technology against the predatory data extraction economy. Privacy, or the freedom to choose what you disclose, to whom, on your own terms, is a foundation of the digital self-sovereignty Ethereum was built to uphold.
Ethereum recognizes privacy not as a niche feature, but as essential infrastructure for a secure, global, peer-to-peer coordination layer.
Today, an advanced ecosystem of privacy tools exists on Ethereum, from privacy-preserving identity verification and secret-ballot voting to confidential transactions and compliance-aware applications, with a roadmap to make privacy the network's default.
“Privacy is not about total concealment of everything. It is about freedom and true consent: to choose what information to disclose to whom, on one's own terms. In our day-to-day lives, we often disclose information, or prove claims about ourselves, to participate with others, or to build relationships on trust, gradually.
However, we believe that end users should always selectively negotiate their disclosures, and that this should only be supported on top of a base of freely available, unconditional privacy.”
The challenge: privacy on public blockchains
Public blockchains like Ethereum operate as immutable, fully transparent ledgers. Their transparency allows thousands of independent computers around the world to securely process transactions, verify state, and power apps, without relying on a central authority.
Because Ethereum is a transparent public network, every onchain action is visible to anyone inspecting the ledger. While Ethereum offers pseudonymity by linking activity to a public key instead of a legal identity, patterns of activity can be analyzed to reveal sensitive information and potentially identify users.
Most internet traffic, including blockchain interactions, flows through centralized chokepoints that introduce privacy and metadata risks. Intermediaries sitting between users and the network can siphon transaction data, profile habits, front-run financial actions, or degrade service based on internet protocol addresses.
Extraction resistance is the architectural principle designed to remove these centralized points of connection. While Ethereum is home to many privacy-preserving solutions for users today, without network-level privacy, those tools may still connect to the network through vulnerable chokepoints. Optional application-layer privacy tools also require an active choice to opt in, exposing the user to surveillance at the point of entry. True confidentiality requires privacy to be practical and ubiquitous by default.
Ethereum's transition to “privacy by default”
Ethereum Foundation researchers have aggregated three core roadmap priorities (opens in a new tab) from across Ethereum's distributed R&D ecosystem:
- Private reads: Improve network-level privacy so users can query and browse the Ethereum network and authenticate with Ethereum apps, without surveillance or metadata leaks.
- Private writes: Securing activities like payments, casting a vote, using an app, or making a transfer against unwanted disclosure, ensuring private onchain actions are as inexpensive and easy as public ones.
- Private proving: Making Ethereum a platform where providing private, cryptographic proofs of any data is accessible on consumer-grade hardware, allowing users to verify eligibility or identity without disclosing unnecessary personal information via efficient zero-knowledge proof generation.
Protecting your digital privacy on Ethereum today
Ethereum is the leading blockchain platform for programmable cryptography. A robust ecosystem of privacy-preserving applications are built on Ethereum, leveraging cryptography to protect digital identity, secure secret-ballot voting, and enable confidential coordination and peer-to-peer interactions.
While early onchain solutions relied on basic obfuscation, today's frameworks balance strict confidentiality with selective disclosure to provide compliance verification when necessary.
Privacy-preserving digital identity
The need for cryptographic privacy is clear when it comes to digital identity. Standard internet methods require users to upload government-issued identification (like driver's licenses or passports), or submit biometric scanning, simply to create a standard social media account, buy a ticket, or access restricted internet content. Uploading sensitive, unredacted documents to third-party verification companies creates centralized identity repositories that are high-value targets for security breaches.
A flaw in this approach is the conflation of identification with verification. An online platform does not need to know a user's legal name, home address, or exact date of birth (identification) to determine if they meet an age threshold; it should only require undeniable mathematical proof (verification) of that fact.
Zero-knowledge proofs (ZKPs) are used on Ethereum to build privacy-preserving digital identity systems. A ZKP is a cryptographic method that allows one party (the prover) to prove to another party (the verifier) that a specific statement is true, without revealing any of the data behind the statement, for example, proving citizenship without revealing passport details.
ZKP + Identity in action: Bhutan National Digital ID (NDI) on Ethereum
A real-world example of using ZKP for identity management systems is the Kingdom of Bhutan's National Digital ID (NDI) system, built on Ethereum. Bhutan's NDI uses ZKPs to allow citizens to cryptographically prove facts about themselves, like “I am a citizen” or “I am over 18,” without revealing the sensitive personal data on their ID.
Learn more about Bhutan NDI in the Decentralized Identity case study
Privacy-preserving identity apps
Voting, governance, and the right to a secret ballot
If decentralized identity secures the autonomy of the individual, decentralized governance secures the autonomy of the community. As participation in digital cooperatives and decentralized autonomous organizations (DAOs) has expanded, and more state actors adopt electronic voting options, the need has grown for digital voting mechanisms that remain publicly verifiable without relying on opaque, centralized providers.
Open-source blockchains like Ethereum have the potential to improve election transparency and efficiency:
- Making data from the election process publicly verifiable, increasing transparency
- Improving turnout via digital access
- Dramatically streamlining the process of counting and validating votes
But the full transparency of public blockchains introduces clear privacy risks. Because the ledger is transparent, every vote is exposed; while accounts are pseudonymous their entire transaction history and its potentially-identifiable onchain activity is visible to anyone, including voting records and potential links to corporate or political positions. An election's integrity collapses if an employer, politician, or an adversarial state apparatus can verify exactly how an individual voted onchain.
Zero-knowledge proofs provide the infrastructure for privacy-preserving voting systems on Ethereum, combining the transparency, verifiability, and efficiency of onchain voting with the cryptographic guarantee of a secret ballot.
Infrastructure built on Ethereum's zk primitives is actively securing human rights around the world today. Freedom Tool (opens in a new tab), a mobile voting app that uses ZKPs, biometric passports, and Merkle-tree registries, has been deployed in high-stakes shadow elections, opposition polls, and parallel governance projects advanced by opposition parties in countries including Georgia, Russia, and Iran. In these environments, the physical safety, liberty, and lives of voters depend on the cryptographic guarantee of ballot secrecy.
Transparent voting without privacy also introduces environments susceptible to corruption. In a transparent onchain vote, large entities and malicious actors can monitor voter behavior in real-time and mathematically verify the fulfillment of vote-buying agreements. The Ethereum ecosystem's MACI (Minimal Anti-Collusion Infrastructure) (opens in a new tab), an open-source suite of smart contracts and zero-knowledge circuits developed by the PSE, is a private, onchain voting system that can be used to build election tools on Ethereum while minimizing the risk of bribery and collusion. MACI makes it mathematically impossible to produce a cryptographic “receipt” proving how an account voted to a third party, removing the economic incentive to buy votes.
Private voting and governance apps
Private association and communication
Digital self-sovereignty requires the ability for private, permissionless communication and association. In a reality where centralized social communication platforms profit from exploiting privacy, users need decentralized alternatives that natively protect their metadata and communications.
Remember: Privacy is critical
Decentralization alone is not enough; without strong privacy guarantees, transparent public networks can expose user relationships and group memberships. Combining decentralized infrastructure with cryptographic privacy ensures that no single entity can control, censor, or monetize human connection.
Transitioning people to Ethereum-based privacy tools requires bridging legacy identities without sacrificing data and anonymity. A developing solution is Web2-ID nullifiers, a cryptographic tool to prove membership in an authorized list without revealing identity, while also preventing double-signing or spamming (e.g., blocking a user from voting multiple times or anonymously spamming a forum). Though their use previously required advanced onchain skills, today, when combined with the verifiable vOPRFs protocol, non-technical users can easily link to existing internet identities, like a Google email address or a GitHub account.
The ability for an individual to prove they possess specific non-Ethereum-based qualifications, while preserving privacy on Ethereum, can enable anonymous whistleblowing, pseudonymous organizational forums, and secure digital association, without reliance on centralized intermediaries that have the control to de-anonymize participants. An example in practice is TLSNotary (opens in a new tab), an open-source library that uses cryptography to let users prove facts about their web data to third parties while retaining full control over what data is shared. Apps built with TLSNotary allow users to prove facts from any website, from bank balances to paid subscriptions to Spotify listening history, either sharing only the fields of data they want to provide or using ZKPs to prove a fact without revealing data.
Private association apps
Protecting digital peer-to-peer transactions
Financial privacy, ensuring that everyday purchases, donations, and financial relationships remain confidential, protects individuals from economic surveillance, discrimination, and targeted exploitation.
A standard Ethereum transaction is peer-to-peer and pseudonymous, but is also permanently recorded on the public ledger. If Alice's public address regularly sends transactions to Bob's public address, anyone analyzing the blockchain can tell that Alice and Bob have an ongoing financial relationship.
Stealth addresses (formalized under the Ethereum standard ERC-5564 (opens in a new tab)) mitigate this transparent correlation. When Alice wants to pay Bob, her wallet software uses Bob's stealth meta-address to generate a unique, one-time destination address that Alice sends funds to. To an outside observer it appears as though Alice has sent funds to a random, never-before-used account.
Stealth address apps
Learn about payments on Ethereum
Mixing protocols and privacy pools
Beyond stealth addresses, another way to shield transfers and transactions, whether sending peer-to-peer, depositing into an app, withdrawing to a wallet, or transferring funds between your own accounts, is through protocols that sever the visible onchain link between the source and destination of the funds.
Early privacy solutions took the form of unstructured mixing protocols (or mixers). Mixers allow users to deposit funds into a communal pool and subsequently withdraw those funds to a fresh address, severing the link between the origin and the destination.
Challenges with compliance led to the development of privacy pools. These systems shift validation from the point of entry to the point of exit. The pool accepts all deposits to maximize the privacy set, but when users withdraw, they must cryptographically prove that their funds came from a ‘clean’ subset of deposits.
Compliance proof is primarily achieved through two models:
- Proof of innocence (POI) / exclusionary semantics: In the POI model a user generates a zero-knowledge proof demonstrating that their specific deposit does not intersect with a predefined blocklist of known malicious addresses (e.g., sanctioned wallets or known hacker addresses). The user proves they are not a bad actor without revealing their actual identity, their specific deposit amount, or their transaction history.
- Association set providers (ASP) / inclusionary semantics: ASPs require users to prove that their funds belong to an allowed subset curated by a trusted ASP before withdrawing. The ASP monitors deposits, performs Know Your Transaction (KYT) screening, and categorizes wallets based on variables like KYC status or the absence of illicit behavior.
Programmable compliance allows privacy pools to effectively deter illicit exploitation while preserving transaction privacy for everyday users.
Private transactions apps
Programmable privacy and layer 2 networks
Stealth addresses and privacy pools protect basic asset transfers but do not shield the complex smart contract logic involved when trading tokens on a decentralized exchange, borrowing assets from a lending protocol, or participating in decentralized governance.
Privacy-focused layer 2 networks provide a private environment for computation while inheriting Ethereum Mainnet's security. Some of these networks use zero-knowledge rollups (ZK-rollups), which bundle thousands of transactions offchain, generate a cryptographic proof of their validity without revealing the underlying transaction data, and post that proof to Ethereum.
ZK-rollups scale Ethereum's network capacity and preserve the security guarantees of Ethereum mainnet while offering the selective disclosure mechanisms necessary for confidential decentralized finance (DeFi), private identity attestations, and compliance-aware applications.
L2s focused on programmable privacy, like Aztec, allow developers to deploy private smart contracts. The internal state, user balances, identity data, and business logic are mathematically shielded from public view, and a Private Execution Environment (PXE) runs on the user's local device, handling confidential data. The public Aztec Virtual Machine allows apps to mix this verifiable client-side private data with shared public ledger state.
Privacy-focused Ethereum layer 2 networks
- Aztec (opens in a new tab) - A privacy-first L2 on Ethereum that allows private execution and private state, public execution and public state, and private interactions with Ethereum Mainnet.
- Fairblock Network (opens in a new tab) - A confidentiality L2 for open finance, focused on confidential finance, confidential execution environments for institutions, and private AI.
- Silent Data (opens in a new tab) - A privacy-enabled L2 for onchain verification of private data and programmable privacy, focused on operating as a platform for deploying private apps and tokenization platforms.
- Starknet (opens in a new tab) - A permissionless, decentralized ZK-Rollup with a modular ecosystem for building custom applications and use cases.
Selective disclosure
Selective disclosure is the ability for users to cryptographically share specific, verifiable pieces of information with chosen parties while keeping the rest of their data private. Across the Ethereum ecosystem, selective disclosure is becoming a core standard for balancing user autonomy with real-world compliance abilities.
- Users of stealth addresses can optionally share a viewing key with authorized third parties, like accountants or tax software, enabling transparency where legally (or functionally) required without compromising control over their funds.
- Privacy pools allow users to interact freely in DeFi, withdraw clean funds, and generate on-demand cryptographic proofs of compliance (like POIs) for auditors and tax records.
- In decentralized identity systems, selective disclosure gives individuals the ability to control access to personal identifiers, such as proving they meet an age requirement without revealing their exact birth date, or, only revealing select fields of personal identifiers by choice.
Selective disclosure serves as a bridge between protecting privacy and maintaining systemic integrity.
What's next
Today, Ethereum's landscape provides individuals with application-layer privacy solutions for transactions, identity, voting, communicating, building apps, and more. The privacy ecosystem on Ethereum offers working alternatives to the extractive data practices that have come to define the modern internet.
A World Computer that is globally accessible, financially transparent, and censorship-resistant is incomplete without mathematically guaranteed privacy. Ethereum's roadmap aims to fully integrate native privacy, closing the infrastructure chokepoints that can leak metadata and expose users.
Applied cryptography, accessible zero-knowledge proofs, and decentralized open-source networks are proven building blocks for a freer, more secure digital world. As network upgrades deploy, and builders increasingly use privacy-preserving SDKs and toolkits, Ethereum moves closer to rendering privacy as the universal default.
Recommended reading
- 10 (Not So) Hidden Dangers of Age Verification (opens in a new tab) - Electronic Frontier Foundation
- American Dragnet: Data-Driven Deportation in the 21st Century (opens in a new tab) - Georgetown Law Center on Privacy & Technology
- Defending Privacy in the Digital Age: Reflections for Data Privacy Day 2026 (opens in a new tab) - Harvard Kennedy School
- Facebook/Cambridge Analytica: Privacy lessons and a way forward (opens in a new tab) - MIT Internet Policy Research Initiative
- Privacy (opens in a new tab) - Electronic Frontier Foundation
- Private Proofs of Innocence | Wiki (opens in a new tab) - Railgun
- Private Transactions on Ethereum using Stealth Addresses (ERC-5564) (opens in a new tab) - Quicknode Guides
- PSE Roadmap: 2025 and Beyond (opens in a new tab) - Fellowship of Ethereum Magicians
- Surveillance Self-Defense Playlist: Getting to Know Your Phone (opens in a new tab) - Electronic Frontier Foundation
- Surveillance Technologies (opens in a new tab) - Electronic Frontier Foundation
- Tackling Arbitrary Digital Surveillance in the Americas (opens in a new tab) - Electronic Frontier Foundation
- Take a Step Towards Privacy: Understanding Digital Footprints (opens in a new tab) - Internet Society
- The Age of Surveillance Capitalism: The Fight for a Human Future at the New Frontier of Power (opens in a new tab) - Shoshana Zuboff
- ‘The Great Hack’: Cambridge Analytica is just the tip of the iceberg (opens in a new tab) - Amnesty International
- Why I support privacy (opens in a new tab) - Vitalik Buterin
- zkID (opens in a new tab) - PSE
