Privacy-first crypto portfolio management on your own machine
rotki is a privacy-first crypto portfolio tracker. It runs as a desktop app on your own computer, reads your exchanges through read-only API keys and your wallets through endpoints you choose, and stores everything in a local database encrypted with SQLCipher. By default nothing passes through rotki-operated servers.
Key takeaways
- rotki runs locally and stores your data in a database encrypted with SQLCipher (256-bit AES) on your own device.
- Exchanges are read with read-only API keys; you never hand over withdrawal access or your full history to a cloud.
- By default nothing passes through rotki-operated servers. Optional premium sync is zero-knowledge.
- It is open source, so the privacy claims can be verified in the code rather than taken on trust.
What rotki supports
- Tracks balances and transaction history across exchanges, wallets and chains from one local app.
- Stores everything in a local database encrypted with SQLCipher using 256-bit AES.
- Connects to exchanges using read-only API keys, so rotki only reads data and cannot move funds.
- Offers optional premium backup and multi-device sync that is zero-knowledge: your database is encrypted on your device before upload.
- Is open source, so you can verify how and where your data is handled.
How to set it up
- 1Download and install the rotki desktop app and create a local account with a password. Your encryption key is derived from it.
- 2Add exchanges using read-only API keys with no withdrawal permissions.
- 3Add your public wallet addresses to track on-chain balances and activity.
- 4Optionally choose your own RPC endpoints or data providers for chain queries.
- 5Optionally enable premium sync for zero-knowledge encrypted backups across devices.
Good to know
- rotki is desktop-first; it is not a hosted web dashboard you log into from any browser.
- Because your data lives on your device, you are responsible for backups. Premium adds optional encrypted sync.
- Reading public chain data requires querying an RPC endpoint or data provider; you choose which one, which determines who sees those requests.
Privacy-first portfolio management in rotki
Most portfolio trackers ask you to upload your accounts and addresses to their servers. That is convenient, but it means your complete financial history lives in someone else's cloud. rotki is built the other way around: it is a privacy-first desktop application that keeps your data on your own machine.
Where your data lives
rotki stores everything in a local database encrypted with SQLCipher using 256-bit AES, with the encryption key derived from your account password. Your balances, transactions and notes are on your device, not in a vendor account. Because rotki is open source, you can read the code that handles your data and confirm this for yourself.
How rotki reads your accounts
Exchanges are connected with read-only API keys, so rotki can see your balances and trades but cannot withdraw. On-chain balances are read by querying chain data through an RPC endpoint or data provider that you choose, so you decide who sees those requests: a provider you trust, or your own node.
The trade-off
A local-first tracker asks a bit more of you: you run a desktop app and you keep your own backups. In return you get ownership and privacy, plus an optional zero-knowledge sync if you want multi-device backups without giving up that control. If you would rather not hand your full portfolio to a cloud service, that is a trade worth making.
Common problems and fixes
Will my API keys or data be uploaded anywhere?
No. rotki uses your API keys locally to read balances and trades, and stores everything in your local encrypted database. By default nothing is sent to rotki-operated servers; premium sync only uploads data already encrypted on your device.
I want to track a wallet without exposing my requests.
Chain balances are read by querying an RPC endpoint or data provider. You choose which endpoint to use, so you control who sees those queries, for example a provider you trust or your own node.
Related integrations
Related comparisons
Related features
Frequently asked questions
What is a privacy-first crypto portfolio tracker?
It is a tracker that keeps your financial data under your control rather than in a vendor's cloud. rotki does this by running locally, reading exchanges with read-only API keys, and storing everything in an encrypted database on your own device.
Does rotki store my portfolio in the cloud?
No. By default your data stays in a local encrypted database on your machine. rotki offers optional premium sync, and even that is zero-knowledge: your database is encrypted on your device with a key derived from your password before it is uploaded, so rotki cannot read it.
Can rotki move my funds?
No. You connect exchanges with read-only API keys that have no withdrawal permissions, so rotki can only read balances and trades.
How is my local data protected?
rotki stores your data in a database encrypted with SQLCipher using 256-bit AES, with the key derived from your account password.