Download Rabby Wallet and confirm the real extension ID
Rabby’s scanner does not help you if the extension itself is a clone. Confirm acmacodkjbdgmoleebolmdjonilkdbch, then hash.
Security Guides · 7 min · Updated Aug 2026 · Expert
A safe Rabby wallet download starts at rabby.io and ends on the Chrome listing acmacodkjbdgmoleebolmdjonilkdbch (Firefox add-on from the same site).
Rabby’s pre-transaction scan is why people switch from MetaMask. A fake Rabby can show a fake scan. The ID is the check that is not theater.
Do this now
- Open Rabby’s site. Type
rabby.io. Use their Chrome or Firefox button. Do not install “Rabby DeFi Security” from a sponsored result. - Read the ID, then hash if you have a file. Chrome URL must contain
acmacodkjbdgmoleebolmdjonilkdbch. If you saved a.crx, drop it into the verifier withrabby_chrome. - Use Rabby’s scanner on the real build. After install, the pre-tx engine only matters on this listing. Still read the approval. The scanner is a helper, not a vault.
Rabby vs look-alike “security wallets”
Clones reuse the purple mark and the word “Rabby.” They cannot reuse the store ID.
| Field | Official | Clone tell |
|---|---|---|
| Site | rabby.io | rabby-wallet.app, rabby-ext.com |
| Chrome ID | acmacodkjbdgmoleebolmdjonilkdbch | Any other 32 chars |
| Firefox | addons.mozilla.org listing linked from rabby.io | Sideloaded .xpi from Discord |
| GitHub | RabbyHub/Rabby | Unrelated org with a similar readme |
What Rabby’s scan cannot do
The engine does not make an unlimited approve safe. It does not verify you installed Rabby. That is the ID and, if you have a file, the hash on this page.
WalletGuard does not run Rabby’s scanner. We only hash files locally.
Frequently asked questions
What is the official Rabby download site?
rabby.io. It links to the Chrome Web Store and Firefox Add-ons. WalletGuard’s Rabby hub points at the same official URLs.
What is the official Rabby Chrome ID?
acmacodkjbdgmoleebolmdjonilkdbch. If chrome://extensions shows a different ID, remove the extension.
Does Rabby replace a checksum?
No. The scanner inspects transactions after a real install. It does not prove the extension bytes. Use the ID, and hash a .crx if you sideload.