Ethereum co-founder Vitalik Buterin has unveiled a bold and practical roadmap to significantly enhance user privacy on the Ethereum network - without waiting for major protocol upgrades.
The proposal, shared on April 11 via Ethereum Magicians, outlines a series of incremental yet impactful steps that developers and wallet providers can implement immediately to protect user data.
At the heart of Buterin’s vision is a shift toward default privacy in wallets and applications. This includes features like shielded balances, private token transfers, and address rotation per dApp - tools that could soon become standard in wallets like MetaMask and Rabby.
“This is a major step,” Buterin admitted, noting the trade-offs in convenience, “but this is the most practical way to remove public links between your activity across different apps.”
Four Pillars of Privacy
The roadmap tackles four critical areas:
- Private onchain payments
- Partial anonymization within apps
- Private chain reads
- Network-level anonymization
These improvements aim to counter Ethereum’s current transparency model, which, while beneficial for trust and security, leaves user activity fully exposed. Knowing someone’s Ethereum address currently reveals their entire transaction history, balances, and interactions.
Privacy Tools in Practice
Buterin emphasized the importance of integrating existing tools like Railgun and Privacy Pools into wallet software. He also advocated for private self-transfers between a user’s own wallets to support the proposed one-address-per-app structure.
Beyond wallet design, Buterin called for embracing new standards like FOCIL (Fork-Choice Enforced Inclusion Lists) and EIP-7701 (native account abstraction). These would allow privacy protocols to operate without centralized relays, making them more robust and censorship-resistant.
He also suggested using Trusted Execution Environments (TEEs) in the short term, and Private Information Retrieval (PIR) in the long term, to prevent RPC nodes from leaking sensitive data. To further obscure metadata, wallets could route requests through mixnets, similar to VPNs, and cycle between different RPC nodes.
A technique called proof aggregation - where multiple transactions share a single onchain proof - could also reduce costs while enhancing privacy.
Privacy Now, Not Later
Crucially, Buterin argued that privacy upgrades don’t need to wait for Ethereum’s next major protocol update, Pectra, scheduled for May 7. Pectra will bring native account abstraction, but Buterin believes wallets and developers should begin integrating these privacy-preserving habits now.
He also proposed allowing users to update wallet security (e.g., replacing private keys) without exposing ties between accounts - further shielding their onchain footprint.
“Privacy should be something users get by default, not something they have to fight for,” Buterin implied throughout the proposal - making it clear that the future of Ethereum privacy is practical, not theoretical, and within reach today.