The Privacy page in Envoy allows you to customize the privacy of your Envoy experience. Here you can connect Envoy to your own node, toggle Tor on or off, and also choose to require additional authentication to open the app.

Privacy Mode

Choose how Envoy connects to the internet. There is no confirmation popup; Envoy shows a short note under the buttons for the option you select:

• Better Performance - Tor is turned off. Envoy notes: "Envoy's connection will be reliable with Tor turned OFF. Suggested for new users."
• Improved Privacy - Tor is turned on. Envoy notes: "Tor will be turned ON for improved privacy. Envoy's connection may be unreliable."

With Improved Privacy on, Envoy shows its Tor connection status with a shield icon at the top of the screen:

• Red shield, pulsing = Envoy is connecting to Tor
• Teal shield = Envoy is connected over Tor
• Solid red shield = Envoy is connected to Tor but cannot reach its node (Foundation's, a public server or your personal node) or the Foundation server
• No shield = Tor is off (Better Performance) or has been temporarily disabled

Node

The node Envoy connects to is the one providing the app with the current state of any connected accounts. It is the connected node's responsibility to ensure each account's transaction history is accurate and up to date. The Node dropdown offers:

• Foundation (Default) - the server run by Foundation
• Personal Node - your own node, entered as a connection string
• Public servers - a group of public Electrum servers: Blockstream, DIYnodes and Bitaroo

Once another node is selected, Envoy will not fall back to the default backend, even if it cannot successfully connect to that node. If this is the case and Tor is on, the Envoy shield will turn red to indicate a connection problem.

Envoy is known to successfully connect with all popular node implementations that ship with an Electrum Server. This includes Citadel, myNode, Nodl, RaspiBlitz, RoninDojo, Start9, and Umbrel. Envoy also supports Esplora nodes. Choose Personal Node, paste in the connection string and Envoy should handle the rest. If you see an error when pasting in the connection string, you may need to manually format to the one shown below.

The expected URL format is tcp://youronionaddress.onion:50001 if connecting via Tor. If connecting via clearnet or local connection, the expected format is either tcp://yournodeIPaddress:port or ssl://yournodeIPaddress:port, depending how your node is configured.

Block Explorer

Envoy uses a block explorer to open transactions in an external view when you tap the Explorer button on a transaction's details screen. The Block Explorer dropdown defaults to Foundation (Default), which opens transactions in Foundation's own explorer .

To use your own explorer, choose Personal Block Explorer and enter its base URL, including the http:// or https:// prefix. Envoy will append /tx/ and your transaction ID to that URL when opening a transaction. Your personal explorer is used for mainnet transactions only; Testnet and Signet transactions still open in Foundation's explorer.

Application Lock

Turn on Unlock with biometrics or PIN to require your phone's own unlock method each time you open Envoy. This can be:

• Face ID (if enabled at the phone OS level)
• Fingerprint (if enabled at the phone OS level)
• PIN (this is the same PIN used to unlock the device)