Your RAND address
Make a wallet here, in this browser, with the network off. You get the shielded address, the spend key, and a wallet.key.json the rand command line and every Rand Wallet app open as they are. The key code is the full node's own address module compiled to WebAssembly; nothing you generate leaves this tab.
Then, if you want the address on file for a distribution — the RAND you buy in the seed sale, a devnet grant — save it to an account. Only the address is saved. It is public by design; the key stays with you.
- Wait for the badge above to read Ready offline. Everything the wallet needs is then in this tab.
- Turn off Wi‑Fi, or switch on airplane mode. Keep this tab open.
- Generate. The spend key comes from your device's own randomness and never leaves it.
- Download wallet.key.json and copy the address. Then reconnect.
Fingerprint Read this out to whoever you're sending it to, or compare it side by side — 16 characters is enough that two different addresses matching by accident does not happen.
Save with fingerprint ? Check it against the one the owner reads out before you save.
Saved in this browser only; clearing site data removes them.
•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
The key file is the wallet. Whoever has it can spend every note the address ever receives; without it, nothing can. Keep it somewhere private and off this browser — a password manager, an encrypted drive — and only then reconnect. The same file opens in the rand CLI (rand address prints this address) and in every Rand Wallet app. The address is public by design — it carries the note key and the ML-KEM encapsulation key a sender seals a note to, which is why it is 1,667 characters long; the spend key is the only secret. Already have a wallet? Its address is what rand address prints — nothing on this site ever asks for the key file or the spend key.
On file for distribution
Checking…Signed in as .
None yet. Generate a wallet, or paste an address, then save.
Fingerprint
One address per account, replaceable any time. Seed-sale purchases are recorded against it, and your RAND is paid to it unless you change it on your account after the sale closes.
Saving needs an account: an email and a password, nothing else. The same account works for the seed sale.
Almost there
Check your inbox
We sent a confirmation link; it works for seven days. If this email already had an account, no new mail was sent: sign in instead, or reset the password. Come back to this page once confirmed, sign in, and save the address.
What gets saved, and what does not
- ›Saved: the address, and the time you saved it, against your email.
- ›Never sent: the spend key and the key file. They exist only in this tab and in the file you downloaded.
- ›An address cannot be turned back into a key. If the file is lost, the RAND sent to the address is lost with it: save a new address and tell us before any distribution.
The address is rand1 plus base58 of the note key and the ML-KEM-768 encapsulation key a sender seals a note to: about 1,665 characters, the form chain 21 runs (unchanged since chain 12). Accounts and addresses in the docs has the derivation, and why chain 11's 54-character form was reverted.
See what a wallet holds
Balances on Rand are shielded: no explorer can look one up by address. The wallet's viewing key can. Paste it and this page opens the chain's notes in your browser and adds up the ones that are yours — RAND, zUSD, and any other RPL token the wallet holds. No account is needed, and the key goes nowhere.
| Leaf | Block | Role | Amount | Memo | Status |
|---|
Every note above was decrypted in this browser and its commitment recomputed from the plaintext. A balance is the sum of the notes this key received whose nullifier is not on chain; change from your own sends counts as received. The explorer and the node saw only reads of public chain data. The key code itself was fetched by this page and its SHA-256 checked against the digest pinned when the site was built, before it ran.