Code Verify
Check your
wallet's code.
Code Verify is a free browser extension. When you open a web wallet, it checks that the code your browser received is the exact build TensorCash signed from the wallet's public source code.
Free. Works in Chrome 137 or Firefox 140 and newer. Developer preview: install from source ↗
It never asks for your password, recovery phrase or keys. It has no tracking, and it doesn't send its results to anyone.
How to check your wallet
Install it
Add Code Verify to Chrome or Firefox, then pin its icon to your toolbar so you can always see it.
Open your wallet
Go to your wallet's website as usual. Code Verify only checks the wallet sites on its list, shown below.
Look at the badge
Before you type anything, look at the small badge on the Code Verify icon. A green ✓ means the code matches a signed build.
Click for details
Click the icon to see which files were checked and which signed version they match.
What the badge means
The badge sits on the Code Verify icon in your browser's toolbar.
Verified
The wallet's code matches a build TensorCash signed. On Chrome, read the limits further down.
Checking
Code Verify is still looking. Give it a moment, or reload the page.
Matches, but not confirmed
Everything it could check matches, but Chrome had to download some files a second time, so it can't confirm those are the ones that ran. Firefox doesn't have this gap.
No signed build yet
This wallet has no signed build to compare against yet. That doesn't mean something is wrong, only that it can't be checked.
Unknown build
The code doesn't match any build TensorCash has signed. It may be a new release that isn't signed yet. Don't use it with your money until the badge turns green.
Mismatch
The code is different from the signed build, or code was loaded from somewhere else. Don't use this wallet.
Can't check right now
Code Verify couldn't download the list of signed builds. Try again later.
If you see a red ✗
- Don't enter your recovery phrase, password or keys.
- Close the tab, and don't send any money from it.
- Tell us at contact@tensorcash.org. In the extension, “Copy report” puts the details on your clipboard: look them over, then paste them into your email.
Wallets you can check
Code Verify can only check a wallet that has a signed build. More wallets will follow.
rHuhu web walletCovered
Code Verify checks this site when you open it.
- Signed build v1.0.8
Bob Labs browser extension
A wallet extension, not a website, so the Code Verify extension doesn't check it.
- Not covered yet
TensorCash Core
A desktop app, so the Code Verify extension doesn't check it.
- Not covered yet
Ask Tilly
Code Verify doesn't check this wallet yet.
- Not covered yet
wallettensor.cash
Code Verify checks this site when you open it.
- Not covered yet
Updated hourly from the list of signed builds. integrity.tensorcash.org/verify ↗
What it tells you, and what it doesn't
It checks
- That the wallet code your browser received matches a build TensorCash signed from the wallet's public source code.
It does not
- Audit the code, or prove the wallet is safe or free of bugs.
- Protect your keys, your recovery phrase or your device.
- Cover wallets that have no signed build.
- Guarantee what already ran before it could check. Chrome checks after the page has loaded, so it can only warn you afterwards. Firefox checks before the code runs, and can block it first if you turn on “Enforce” in the extension's options.
A signature is not an endorsement. It means the build came from the published source code, nothing more. It doesn't say the code is good.
TensorCash release key fingerprint
5d78dcd74dd8309adf5b2a577e7c86fa2e16110f4d444f30160eea7e8d844f2dThe extension has this key built in and checks every signed build against it. For the technical details, see integrity.tensorcash.org/verify ↗.