# Get started with Incognitee Test Net

## Incognite Paseo Test Wallet  <a href="#incognitee-cli-tutorial" id="incognitee-cli-tutorial"></a>

You can already test a simple version of the Incognitee Wallet on Paseo. \
\
Follow the link : <https://try.incognitee.io>

Once you enter the website, you will see the Incognitee wallet, which is already generating new wallet for you.&#x20;

1. The first step is to obtain free PAS tokens on Paseo via the button below in the window. There you should copy the address into your clipboard and go to the Paseo faucet. \ <br>

<figure><img src="https://3529530876-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHGQkGlOxedyndchi5TU4%2Fuploads%2FxUNQyAWgJaTs6Fb7Skpd%2Fimage.png?alt=media&#x26;token=56611337-515e-479f-8813-ac6ffab1ccb7" alt="" width="563"><figcaption></figcaption></figure>

2. Enter your copied wallet address in the faucet to get your first 100 free PAS. After this, you can close this window and return to the Incognitee web wallet.&#x20;

<figure><img src="https://3529530876-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHGQkGlOxedyndchi5TU4%2Fuploads%2Fpe8eKDsUrS7x95g6kEE4%2Fimage.png?alt=media&#x26;token=92591115-cc3d-4eae-acd6-94e5acd778b9" alt="" width="563"><figcaption></figcaption></figure>

3. You can now also close the pop-up screen and continue interacting with the wallet. Now you can also see on the top, that you are currently active on the only available test network Paseo with one available Token PAS.  \
   In the center of the screen, you can see your current public balance,  as you just retrieved 100 PAS from the faucet.  From here you can now either shield your balances to the private L2 or switch to your private balance.&#x20;

<figure><img src="https://3529530876-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHGQkGlOxedyndchi5TU4%2Fuploads%2FhzOG9D8xUMIgZanUiR7j%2Fimage.png?alt=media&#x26;token=0264fb03-1df5-4829-8a88-07fb73b2e574" alt="" width="563"><figcaption></figcaption></figure>

4. By selecting "Shield" you can now transfer your PAS to the private L2 layer.&#x20;

<figure><img src="https://3529530876-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHGQkGlOxedyndchi5TU4%2Fuploads%2F198CeNspJN0uL0mXXlmU%2Fimage.png?alt=media&#x26;token=c59b1576-08ad-4fa3-a2a5-f13786e94104" alt="" width="563"><figcaption></figcaption></figure>

5. Switching now to the private balance, you can either send or receive PAs tokens privately and instantly without leaving any trace on chain. Or you can unshield the PAS tokens back to layer 1.&#x20;

<figure><img src="https://3529530876-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHGQkGlOxedyndchi5TU4%2Fuploads%2FMqPHzDPbra4Lpw2G8PtD%2Fimage.png?alt=media&#x26;token=b2462039-9894-411c-b6e1-93b08264dc39" alt="" width="563"><figcaption></figcaption></figure>

## Under the hood

#### Check sidechain activity

Visit the [Integritee Network on Paseo explorer](https://polkadot.js.org/apps/?rpc=wss%3A%2F%2Fpaseo.api.integritee.network#/explorer) where you can see events whenever sidechain blocks get finalized:<br>

<figure><img src="https://hackmd.io/_uploads/rJsCT-uFT.png" alt=""><figcaption></figcaption></figure>

As privacy is our main feature, you can’t see much more here. The `BlockHeaderHash` helps you proving that you sent funds to someone. By default, recipients just observe a change in their balance but they have no clue where the funds come from unless you tell them and provide a merkle proof for the sidechain block inclusion of your transfer.

However, as shielding and unshielding events are publicly happening on Paseo, you can observe shielding/unshielding activity on the vault account on [subscan](https://paseo.subscan.io/account/5CBWPstfcW7dPYGdUG4kVDZSQq9Q9Ed65LT2Eu1inhJRoY8e?tab=transfer).

The balance of the vault account will always exactly match the total supply on the respective sidechain shard.

#### What are shards and mrenclaves?

Each instance of an Incognitee sidechain is identified by a *shard identifier* and we’ll need to tell the validators which shard we’d like to talk to. Think of it like the genesis hash of a L1 blockchain.

The `MRENCLAVE` identifies the validator code which is executed in Intel SGX enclave (it’s basically the hash of the enclave binary). Your call will only execute if the validator runs the code you expect it to run.

#### Why should I trust validators?

Because they can’t cheat and they can’t see your data. That’s what TEEs guarantee. But how should you know that the validators actually run the correct code in a TEE? You can authenticate validators thanks to Integritee’s remote attestation registry at [enclaves.integritee.network](https://enclaves.integritee.network/?rpc=wss%3A%2F%2Fpaseo.api.integritee.network).

There you can find the validator for this tutorial if you search for the url you’re using `wss://integritee-1.cluster.securitee.tech:2000` and it will tell you the verified MRENCLAVE which has been remotely attested using [our decentralized DCAP process](https://docs.integritee.network/4-development/4.5-attesteer).