Shakescape

Content rating
Everyone
10+
Downloads
Content rating
Everyone
Unrestricted Internet
Learn more
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image
Screenshot image

About this app

Shakescape is a dual-root browser for ICANN and Handshake names. It synchronizes Handshake headers, verifies HNS proofs locally, resolves delegated names through authoritative DNS, and shows the DNSSEC, TLSA, DANE, and WebPKI evidence behind the selected connection.

Browser features:
- HNS-aware address entry for names such as `example/` and `name.tld/`
- Local Handshake proof verification and resolver caching
- Proof-anchored authoritative DoH for HNS sites that publish authenticated bootstrap metadata
- Optional requester-only HNS P2P DNS relay, off until explicitly enabled
- Optional recursive HNS DoH recovery, blank by default and used only after eligible direct-resolution failures
- Local DNSSEC, TLSA, and DANE validation for HNS answers from every admitted transport
- Ordinary ICANN websites with locally validated DNS evidence and an authenticated WebPKI fallback when policy permits it
- Resolver trace, HNS proof details, and TLSA inspection
- Local controls for cookies, history, downloads, diagnostics, and resolver cache

Native HNS wallet features:
- Create or restore one device-local Shakescape wallet
- Protect the wallet key with Android device security
- Synchronize HNS balance and recent activity directly with Handshake peers
- Receive HNS with an address or payment QR code
- Scan a Handshake payment QR code on the device
- Review and approve guarded HNS sends with an explicit fee cap
- Import tracked Handshake names and set a restoration birthday height
- Delete the encrypted local wallet through a protected confirmation flow

Wallet operations are native-only. Websites cannot invoke wallet actions or read wallet state, and the app does not install a website wallet provider. Recovery phrases and private keys are not sent to Denuo Web, websites, advertising, or analytics services. The camera is used only after you choose the QR scanner, and the decoded payment address is processed locally.

The current release does not expose the unfinished Bitcoin, name-operation, or Shakedex marketplace screens. Shakescape has no developer-operated account, ads, analytics SDK, subscription, in-app purchase, exchange service, or paid feature unlock. Donations are optional and do not unlock features.
Browse HNS with local proofs, DNSSEC, DANE, and an optional P2P relay.
Updated on
Sep 3, 2026

Data safety

Safety starts with understanding how developers collect and share your data. Data privacy and security practices may vary based on your use, region, and age. The developer provided this information and may update it over time.
  • No data shared with third parties
    Learn more about how developers declare sharing
  • No data collected
    Learn more about how developers declare collection

What’s new

1.0.4 fixes DNSSEC-signed sites routed through unsigned CDN endpoints while retaining strict dual-root validation and native-wallet protections.