How Monero Anonymity Works in Plain Language
How Monero's Anonymity Works, in Plain Language
Ring signatures, stealth addresses and RingCT explained without the mathematics
Short answer: Monero hides three things on every transaction. Ring signatures hide who sent it by signing with a group of possible spenders instead of one. Stealth addresses hide who received it by writing a one-time address on the chain rather than yours. RingCT hides how much moved while still proving the sums balance. None of it is optional, so there is no transparent mode to fall back into by mistake.
A Bitcoin transaction publishes three facts forever: which address paid, which address was paid, and how much. Monero was built to publish none of them, and each of the three mechanisms below removes one.
Stealth addresses: hiding the receiver
When someone pays you, their wallet does not write your address into the chain. It derives a fresh one-time address from your public keys plus random data, and that is what appears on-chain. Nobody scanning the ledger can connect it to you, and if the same person pays you ten times, the ten payments look unrelated to each other.
Your wallet finds those payments with your private view key, which lets it scan the chain and recognise which one-time outputs belong to you. This is also why a view key can be handed to an accountant: it grants the ability to see incoming funds and nothing else.
Ring signatures: hiding the sender
To spend an output, your wallet signs with a ring: your real output plus a set of decoys picked from the chain, currently sixteen members in total. The signature proves that one member of the ring authorised the spend, without revealing which. An observer sees sixteen equally plausible candidates, and each of those was itself once spent in another ring, so the ambiguity compounds rather than resolving.
Double spending is prevented by a key image, a unique fingerprint of the real output that reveals nothing about which ring member produced it. If the same output is ever spent twice, the network sees the same key image twice and rejects it.
RingCT: hiding the amount
Ring Confidential Transactions, live since 2017, replaced visible amounts with cryptographic commitments. The network can verify that inputs equal outputs plus fee, and that no negative amounts were created, without any node learning the numbers. The range proofs that make this possible were later replaced with Bulletproofs and then Bulletproofs+, which cut transaction size and fees substantially.
What is still visible on the Monero chain?
What is still visible: the fact that a transaction happened and when it occurred, the transaction size in bytes and the fee paid, the number of inputs and outputs, key images used to prevent double spending, and the link between one transaction and the next.
What is hidden: the address that sent the transaction, the address that received it, and the amount transferred.
Two things worth naming explicitly. First, Monero hides the ledger, not your network connection: transactions are relayed with Dandelion++ to make the originating node harder to pinpoint, but running your own node or using Tor is what actually removes that exposure. Second, privacy on-chain does not undo disclosure off-chain: coins withdrawn from a verified exchange account are linked to that account in the exchange's records regardless of what the chain shows afterwards.
Is Monero's privacy getting stronger or weaker?
Stronger, on the protocol side. The ring size has been raised over the years, amounts have been hidden since 2017, and the current research effort is aimed at replacing ring signatures with full-chain membership proofs, which would build the anonymity set from the entire chain rather than a sample of sixteen. Work on that upgrade has been ongoing and is the most significant change on Monero's roadmap.
The pressure comes from outside instead. Regulated exchanges have been delisting XMR since 2024, and the EU Anti-Money Laundering Regulation prohibits anonymity-enhancing coins at licensed providers from 1 July 2027. That affects where the coin trades, not how the chain behaves.
FAQ
Can Monero transactions be traced?
No general method of tracing current Monero transactions has been demonstrated publicly. Historical analysis has exploited weaknesses that no longer exist, such as the period before RingCT when amounts were visible, or early transactions with a ring size of one. Deanonymisation attempts today focus on the network layer and on exchange records rather than on the chain itself.
What is a view key used for?
It lets someone see incoming transactions and the balance without being able to spend. Practical uses include a watch-only wallet on an online computer, giving an accountant read access, and proving to a counterparty that a payment arrived.
Does Monero hide my IP address?
Only partially. Dandelion++ makes it harder to identify which node first broadcast a transaction, but the strong answer is to run your own node or route the wallet over Tor, both of which are supported in the main wallets.
How do I acquire XMR without undoing the privacy?
Send coins into a non-custodial swap and receive the Monero directly in your own wallet, rather than buying on an account-based exchange and withdrawing. On Swapuz that is BTC to XMR or USDT to XMR with no registration and no KYC by default.
Read Next on the Swapuz Blog
- Why XMR Still Matters for Privacy-Focused Swaps
- The Power of Anonymous Crypto Swaps
- Is Monero Legal in 2026
Last updated: September 2026.
This article is for informational purposes only and is not financial or legal advice. Monero's protocol changes with scheduled network upgrades; the mechanisms described here reflect the design as of September 2026.
