Level 04 · Zero-Knowledge, Made Simple
Prove it without revealing it.
Zero-knowledge proofs in plain language, with a hands-on analogy, and why Zcash relies on zk-SNARKs.


BeginnerStart here. No prior knowledge needed.
A zero-knowledge proof lets you convince someone that a statement is true without showing them anything else: not the secret, not the reasoning, nothing extra.
Everyday version: proving you’re over 18 without showing your birthday, your name or your address. The bouncer learns one fact, “yes, over 18”, and nothing more.
Zcash uses this idea so the network can confirm that a shielded payment follows the rules without seeing who sent it, who received it or how much moved.
Try it
A classic analogy, made playable. Your friend holds two balls that look identical to them. Can you prove they’re different colours without saying which is which?
- 01Your friend can’t tell red from green. To them, the two balls look identical.
- 02They hide the balls behind their back and either swap them or don’t.
- 03You say “swapped” or “not swapped”. You never say which ball is which colour.
Press the button to start round 1.
Your friend becomes convinced the balls are different colours, yet never learns which one is red. That’s zero knowledge.
What a Zcash shielded proof convinces the network of
Every validator checks these, without learning the sender, the recipient or the amount:
- 01The funds exist
The notes being spent were created earlier on the chain.
- 02The spender is authorised
Whoever built the transaction holds the right spending key.
- 03No double spending
Each note can only be spent once. A unique “nullifier” is published to enforce that.
- 04The values balance
Inputs equal outputs plus the fee, so no ZEC is created from nothing.
ExploreOptional. Open what you’re curious about.
Real-world context
Beyond Zcash
Zcash was the first widely used cryptocurrency to put zero-knowledge proofs into production. Today the same family of techniques is used across the industry, for example in scaling systems on other networks, and it is being researched for identity uses such as proving your age or a membership without handing over the document itself.
Key takeaways
- A zero-knowledge proof convinces someone without revealing the underlying secret.
- Zcash proves that a shielded transaction follows the rules without showing the sender, recipient or amount.
- zk-SNARKs are small, fast to verify and non-interactive.
- The Orchard pool uses Halo 2, which needs no trusted setup.
Knowledge checkpoint · Level 04
Check what stuck
0 / 3 correct
01What does a zero-knowledge proof let you do?
The verifier is convinced that the statement is true and learns nothing else.
02In the ball game, why does the verifier repeat the test many times?
One lucky guess is easy, but twenty in a row is about a one-in-a-million chance. Confidence grows with every round.
03What does “non-interactive” mean in zk-SNARK?
A single proof is published with the transaction, and any validator can check it independently.
Checkpoint clearedLevel 04 is marked complete in this browser.
Learning resources
Checked against these sources · reviewed November 2026
- Zcash · officialZcash — What are zero-knowledge proofs?(opens in a new tab)
- Zcash · officialZcash — What are zk-SNARKs?(opens in a new tab)
- Zcash · officialZcash — What is Halo?(opens in a new tab)
- Technical docsThe Halo 2 book(opens in a new tab)
- Technical docsZcash protocol specification (PDF)(opens in a new tab)