WALLET REQUEST
Review a request
Set up your wallet
Your recovery phrase and any BIP-39 recovery passphrase are encrypted on this device with your wallet password. R0AR cannot recover a forgotten password.
Restore an existing wallet
Used with the recovery words to derive the same addresses. It is encrypted together with the phrase on this device and is never sent to sites or RPC providers. Leave blank if you did not set one.
Uses the standard Ethereum recovery path. Private keys restore one address. Add up to 1,000 addresses per batch; repeat later for more.
Legacy wallet found. Its old storage format is not secure. Migrate it to encrypted storage now, then verify your recovery backup.
Restore an encrypted backup
Choose a local .r0ar file and enter its backup master password. After restore, that password unlocks the wallet.
Unlock your wallet
Confirm with your device’s fingerprint, face, or screen lock. Your wallet password remains available below.
Enter the wallet password that encrypts this device’s recovery material. A BIP-39 recovery passphrase is stored encrypted with its recovery phrase; it is not entered here.
—
Cached prices can be cleared in Settings → Privacy & data. Prices reload when available.
Value over time
On this deviceCurrent fresh-price total: —
No combined check-in yet. Refresh to read supported networks.
Where these numbers come from
Refresh all networks contacts each network’s selected RPC. A row retry contacts only that network’s selected RPC. RPC providers can see your IP and wallet address. Nothing runs in the background. Only asset identifiers go to the optional price provider.
?
Portfolio snapshots are saved on this device
Allow the selected public RPC and optional price service to load balances and USD estimates.
The RPC can see your IP address and wallet address. The price service receives asset identifiers, not your address. You can use your own RPC instead.
Assets
Standard EVM RPCs cannot list every token held by an address. With network access enabled, R0AR checks Transfer history when this wallet opens, then reads balances for matching contracts through the selected RPC. The provider can see your IP and wallet address. Results are saved per wallet and network; continue the scan for older history or rescan for newer transfers.
Add a token
Token contracts and their symbol/decimal data are untrusted. Check the address before sending.
Use R0AR to sign in Checking current tab…
Checking the current website…
- Allow this siteChoose Connect this site. Chrome may close this popup to ask for site access; reopen R0AR and continue.
- Approve address sharingReview the site and account in the separate wallet window. Your address is not shared until you approve.
- Return to the websiteReload if needed, choose R0AR in the website’s wallet prompt, then start its sign-in action.
- Review any wallet requestConnecting does not sign you in. If the site requests a signature or transaction, review the site and every request detail before approving or rejecting.
- Continue on the websiteAfter a decision, return to the site to continue. R0AR cannot control the site’s own login steps.
DIRECT · KEYLESS · USER-INITIATED
Swap with CoW Protocol
Only ERC-20 tokens are available here. Native coins and chains without a verified CoW route stay disabled. Add a token in Wallet first if it is not listed.
Token symbols can be imitated. Check the contract address shown in each selector; custom tokens may have no route or may be unsafe.
Verified quote · CoW Protocol
A sell order is a limit order: it can execute only at the signed minimum or better, and may remain open until its expiry.
What CoW can see
When you request a quote, check an order’s status, or request cancellation, this extension contacts api.cow.fi directly. CoW can see your IP address, wallet address, token pair, amount, and order details. R0AR does not proxy the request or send swap analytics. No quote is requested until you press the button above.
Approval transactions (if needed) are sent through the selected RPC and use native network gas. R0AR asks for an exact token allowance, never an unlimited one.
THE R0AR ECOSYSTEM
Explore
Independent destinations across the R0AR ecosystem and beyond.
Collectibles
Discover NFTs to see them here.
Collection floor prices and rarity ranks are optional. Received-date sorting is unavailable when a reliable date is missing.
Collection floors and rarity
When you choose to load this data, the extension sends NFT identifiers directly to the supported provider—not your wallet address or account name. No request runs until you save consent and choose Load floors & rarity.
Checks use the selected network and active account.
Discover NFTs
Optional indexers receive your public wallet address, the selected network, your IP address, and request metadata. Ethereum discovery uses Blockscout. OpenSea discovery and Alchemy discovery are available on the networks each provider supports and require your own API key. NFT image references are saved during discovery but are not fetched unless artwork caching is enabled or you choose the manual cache action. Enabled provider and artwork-caching choices can be inherited by other wallets; Settings → Privacy provides per-wallet opt-outs. Selecting a wallet can start discovery and cache artwork automatically only when choices, required API keys, and existing Chrome host permissions allow it. No new permission is requested automatically. Missing access is explained below; the manual discovery and image-host permission controls remain available. Artwork requests go directly to HTTPS metadata hosts or the IPFS gateways ipfs.io, dweb.link, and gateway.pinata.cloud, omit credentials and referrers, and are not proxied by R0AR. Opening this page by itself reads cached images only.
OpenSea discovery uses your own API key. When discovery is requested by your selected wallet’s saved choice or by the Discover button, OpenSea receives its public address, network, API key, IP address, and request metadata. Requests go directly to OpenSea; R0AR does not receive your API key or proxy the request. Supported networks depend on OpenSea’s NFT account API.
Alchemy is an optional NFT metadata source on Ethereum, BNB Chain, Polygon, Arbitrum, Optimism, Base, and World Chain. When discovery runs from this wallet’s saved choice or the Discover button, Alchemy receives this account’s public address, selected network, your Alchemy API key in the request URL, IP address, and request metadata. Use your own key. Requests go directly from this extension to Alchemy; R0AR does not receive, bundle, or proxy the key. Alchemy metadata may identify image hosts; with automatic artwork caching enabled, those hosts receive image requests only if their Chrome permissions already exist.
Check an NFT with your selected RPC
Enter an ERC-721 or ERC-1155 contract and token ID. The selected RPC receives the contract and token ID, plus connection metadata such as your IP address. This check does not send your wallet address or use an NFT indexer when ERC-721 is selected. When ERC-1155 is selected, the RPC also receives the active account address to check its balance; no NFT indexer is used.
Tracked on this network
Collection
On-chain details
More from this collection
Recent activity
Transactions submitted through this wallet, discovered on-chain transactions and token transfers, and CoW order submissions are stored locally. Refresh scans only the selected account and network through its selected RPC in bounded pages. That provider receives your wallet address and requests; no hosted indexer or alternate-provider fallback is used. Internal native transfers require RPC trace support. CoW order status is checked only when requested. Open orders can be cancelled after a separate wallet approval; CoW cancellations are best-effort.
Refresh to begin scanning on-chain history through the selected RPC. Your wallet address and requests go directly to that provider.
No saved Activity entries match this transaction hash.
For a specific internal-native trace check, choose a selected-RPC block range of up to 100 blocks. Automatic history scanning continues independently.
Settings
R0AR Wallet · v2.1.0
Incoming delegations
Incoming delegations
Open this view to check incoming delegations for the active account.
The active account is unavailable or has no usable Ethereum address. No Delegate.xyz access was requested. Choose another account if one is available, or add or import an account in Accounts & recovery.
Privacy and connection details
Only when you open or refresh this view, R0AR requests incoming delegation data directly from Delegate.xyz. The active public wallet address is sent to Delegate.xyz, which can also see connection metadata such as your IP address and request details. R0AR does not proxy the request or send analytics.
Delegate.xyz's lookup returns incoming and outgoing records for the address. R0AR filters the response and displays incoming delegations only.
This check covers only Delegate.xyz-supported networks listed here. Connecting R0AR Wallet, approving access, and signing remain separate actions on the destination site; the extension never does them automatically.
Delegate.xyz documents its v2 wallet lookup at api.delegate.xyz/registry/v2/<address> and the registry deployments for these supported networks.
Unlock and security
Security and unlock
Closing the popup does not lock your wallet. Stay unlocked keeps it available for this browser session; a browser restart, extension reload or update, or manual lock clears the temporary unlock and requires verification again.
Device unlock
Set up device unlock for this account to use your computer’s fingerprint, face, or screen lock.
Device verification stays on this computer. R0AR does not receive your fingerprint or face data and does not create a separate wallet PIN. Device unlock is set up per account; your wallet password always works as a fallback. Your platform passkey provider must support WebAuthn PRF. If setup reports that no secure key was returned, use an updated browser and a passkey provider that supports PRF. If you remove this wallet, remove its R0AR credential separately in your device’s passkey settings.
EOA Lockdown
Enabled by defaultEnabled by default for standard accounts. While enabled, R0AR blocks EIP-7702 authorizations through connected sites and WalletConnect. You can opt out for this account only after reviewing and accepting the risks below.
When Lockdown is disabled, R0AR may sign EIP-7702 authorizations and type-4 transactions after a separate transaction review. This allows an approved contract to execute code as your EOA.
A dApp may ask MetaMask or another wallet to authorize EIP-7702 delegated code for your standard account. Lockdown governs only signatures made by R0AR; it cannot stop someone with your private key from delegating through another wallet or tool.
These checks read EIP-7702 code on your own account. They are separate from the Delegate.xyz incoming-delegations lookup, which shows delegations made to you.
Delegation checks have not run.
RPC privacy and recovery limits
Checks use each network’s configured RPC provider only; R0AR does not silently switch providers. The provider receives your public wallet address and request metadata, and may see your IP address. Opening this security page checks only networks whose RPC permission is already granted. A network without permission is not queried unless you choose Check for that network and grant Chrome access.
A detected delegation can be revoked only after you start and review a separate transaction; R0AR never signs or broadcasts a revocation automatically. Revoking does not repair a compromised private key. If you suspect compromise, create a newly generated wallet and move your funds to it.
Networks and RPCs
Network selection
Choose the chain for balances and activity. Public RPCs are available by default; provider changes are optional.
Loading active RPC…
To connect this browser tab, open Settings → Connected sites & apps. Chrome asks for access to that site only.
Choose another public RPC (Chainlist)
The backup RPC is not contacted automatically. If you choose it, that provider receives your RPC requests directly and can see your IP address and wallet activity.
Browse Chainlist’s public endpoints for the selected network. The list refreshes every minute while Networks & RPCs is open.
Load the directory to see available public RPCs.
Chainlist provides a tracking label, not uptime, safety, or performance scores. R0AR checks the selected endpoint’s chain ID and response time when you use it; one check is not an uptime guarantee.
Loading this directory contacts Chainlist.org, which can see your IP address. The request does not include your wallet address, secret, or balances. Selected RPC providers receive your RPC requests directly.
Private RPCs for this network
Where do I get a private RPC URL?
- Create a project or endpoint with a provider such as Alchemy, Infura, or QuickNode.
- Select the same chain shown above, then copy its HTTPS RPC endpoint from the provider dashboard.
- Paste the endpoint here and save it. Chrome will ask permission for that provider’s host; R0AR checks that it reports the selected chain before saving.
Provider URLs often contain an API key. Treat the full URL as a credential: do not post or share it. It is stored in this Chrome profile; exported backups encrypt it with the backup password. Requests go directly to the provider. Chrome host permission must be granted again after restoring on another device.
Add a custom network
Connected sites and apps
Connected sites and apps
Connected sites can read your public address and request separate approvals for signatures and transactions.
Use “Approve active account” to restore access for only the account selected above. Other accounts stay private until separately approved.
WalletConnect sessions
Pairing is started only when you paste a WalletConnect link and choose Start pairing. Every app request is limited to the networks and methods you approve here, with separate wallet reviews for signatures and transactions.
Opening this section may reconnect previously approved sessions. A new pairing starts only when you choose Start pairing.
Active sessions
What the WalletConnect Relay receives
R0AR connects directly to the WalletConnect Relay at relay.walletconnect.com. The relay can see your IP address, the project ID you configured, connection timing, session topics, and encrypted traffic metadata such as message size. WalletConnect encrypts session messages end-to-end, so the relay cannot read your wallet address, app name or URL, requested networks or methods, or RPC/signing/transaction contents. R0AR receives the app metadata and access request to show them to you, but does not load its icon or open its URL. R0AR disables WalletConnect telemetry and Reown app-verification lookups; the app metadata shown in review is supplied by the peer and is not independently verified.
Pairing links contain one-time connection material. Paste only a link from the app you intend to connect. R0AR does not load app icons or open the app's URL during review.
Privacy and data
NFT provider and artwork choices
Enabled NFT discovery providers and automatic artwork caching are inherited by other wallet accounts on supported networks. Turn off a choice to opt out only this wallet; other wallets are unchanged. Selecting a wallet with these choices can send that wallet’s public address to the enabled providers and request uncached images from permitted metadata hosts. Automatic work never asks Chrome for new permissions. Manual discovery and image-host permission controls remain in Collectibles. OpenSea collection floors and rarity use separate consent.
Cached NFT artwork
Remove only locally cached NFT image files to free device storage. Your wallet accounts, settings, and NFT gallery records stay on this device. Images can be cached again when you choose.
Open this section to review cached image storage.
OpenSea API key
Use your own OpenSea API key for NFT discovery on supported networks. The key is stored in this Chrome profile and is not encrypted at rest by R0AR. It is sent directly to OpenSea only after you enable discovery for a wallet, and is included only inside password-encrypted .r0ar backups. R0AR does not receive the key.
Alchemy API key
Use your own Alchemy API key for optional NFT discovery. The key is stored in this Chrome profile and is not encrypted at rest by R0AR. It is sent directly to Alchemy in the API request URL only after you enable discovery for a wallet, and is included only inside password-encrypted .r0ar backups. R0AR does not receive or bundle the key.
NFTScan API key
Use your own NFTScan API key for BNB Chain collection floors and rarity. The key is stored in this Chrome profile and is not encrypted at rest by R0AR. It is sent directly to NFTScan in the request header only when you choose to load collection data, and is included only inside password-encrypted .r0ar backups. R0AR does not receive or proxy the key.
Portfolio chart data
Selected-network check-ins can be captured when you open or refresh the wallet. Combined-network check-ins are captured only when you choose “Refresh all networks.” Both are encrypted and kept on this device; R0AR and outside history services do not receive them.
The latest valid asset prices are also cached encrypted on this device, separately from chart history, for up to seven days. Cached prices are labeled and are not counted in totals or chart check-ins once stale.
Turn this off to pause new check-ins for both chart views. Existing chart data stays until you clear it.
Remove saved asset quotes without deleting your portfolio chart or wallet accounts.
Remove the saved estimates shown in the account picker. This does not clear cached asset prices or portfolio chart history.
Address book
Saved addresses
Save nicknames for recipients you trust. Entries stay on this device and are included in encrypted wallet backups.
Accounts and recovery
Manage accounts
Add more addresses from this account’s recovery phrase, create a separate wallet, or import another phrase or private key. Deriving from this account reuses its encrypted BIP-39 recovery passphrase, if present. Addresses use the standard Ethereum recovery path, are encrypted on this device, and each needs separate site approval. There is no wallet-wide account limit; add up to 1,000 recovery addresses per batch.
Names are saved only on this device and are never shared with websites or RPC providers.
Used only with the imported recovery phrase and encrypted together with it on this device. Leave blank if there is no recovery passphrase.
A phrase adds the number of addresses above. Importing the same phrase again continues with its next addresses. A private key always adds one account.
Write down this account recovery phrase and store it offline.
Encrypted backup and restore
Create a local-only r0arwallet-backup.r0ar file. Export verifies your current wallet password; the separate backup master password encrypts wallet secrets, settings, portfolio history, NFT gallery data, cached NFT artwork, saved addresses, provider API keys and consents, and per-site account approvals. After restore, that backup master password becomes the unlock password for the restored wallet.
Keep the file and password private and in separate safe places. R0AR cannot recover a forgotten backup password. Chrome host permissions, device unlock, and active WalletConnect sessions cannot be transferred; Chrome may ask for permissions again when you use a site, RPC, or NFT provider. Site account approvals and saved NFT consent are restored, but each signature and transaction still needs your approval.
If cached NFT artwork could not be restored during wallet recovery, choose the same backup and use this action after freeing device space. It replaces only cached NFT images from the backup; wallet accounts and settings are not changed.
Reveal recovery phrase or private key
Anyone who sees this secret can take your assets. Reveal it only in a private place.
Delete wallet from this device
This deletes the encrypted wallet, local transaction/token lists, and saved portfolio chart history. Make sure your recovery phrase is backed up first.
Back up this recovery phrase
Anyone with this phrase can take your funds. Do not share it, photograph it, or store it online. Write it down and keep it offline.