Is Noir Wallet Safe? — Extension Safety Profile

Noir Wallet requests broad host access to all HTTPS websites and local development endpoints (localhost and loopback addresses). This level of access is normal for a crypto wallet: it allows the extension to inject a communication API into pages so decentralized applications can request wallet connections and transactions. The storage permission stores your wallet data locally, while offscreen, notifications, alarms, and sidePanel enable background processing, transaction alerts, and a persistent interface. As a manifest V3 extension, it runs in a more isolated environment than legacy extensions.

Crypto wallets are a high-risk category. They manage sensitive private keys directly in the browser, making them attractive targets for phishing sites and lookalike clones. A careful user should always verify that they are installing the official extension from the store listing and be suspicious of any prompt asking for a seed phrase outside the legitimate setup flow. The developer declares it collects user activity but states the data is not sold or used for unrelated purposes; such declarations are self-reported and not independently confirmed.

The safety score of 80/100 (grade A) reflects solid technical hygiene. The strongest dimension is Maintenance & Ownership (100%), indicating the extension receives timely updates and is actively maintained, which is crucial for security patches. The weakest dimension, Publisher & Identity (60%), suggests the publisher’s public verifiability is limited. This is not uncommon for smaller or privacy-focused projects, but users may want to cross-check the extension’s authenticity through the official zknoir.com website and community channels before trusting it with funds.