Monero works by hiding four things about every transaction: who sent it, who received it, how much moved, and even which device broadcast it. It does this with a stack of privacy technologies that are switched on by default, so no user has to opt in. The result is a blockchain that can verify payments without exposing them.
On a normal blockchain like Bitcoin's, all four of those details are public. Monero assigns a specific tool to hide each one. Stealth addresses hide the receiver, ring signatures hide the sender, RingCT hides the amount, and Dandelion++ hides your network address. Two more keys then let you open the curtain on your own terms.
The payoff is privacy that is mandatory rather than optional, and the clearest way to understand it is one layer at a time.
Why Monero's privacy is mandatory, not optional
Monero's privacy is built into every transaction and cannot be switched off, which is what separates it from coins where privacy is a setting. There is no transparent mode and no public-address trail to follow. Every payment gets the same protection, whether you are a business, a saver, or someone who just values financial privacy.
That default matters more than it sounds. On most chains the ledger is fully public, so anyone can follow an address over time, much like how a Bitcoin transaction works in the open (source: Monero project, What is Monero). Monero hides those details for everyone at once. That is important, because optional privacy leaves a fingerprint: the moment only some users hide, hiding itself looks suspicious. When every transaction is private, there is no "more private" or "less private" Monero user to single out. If you want the general idea first, the primer on crypto privacy basics sets it up.
Stealth addresses hide who receives
A stealth address lets you receive Monero without your address ever appearing on the blockchain. You share one public address, but the sender's wallet turns it into a fresh, one-time address for each payment. Only you and the sender can connect those payments to you, so an outside observer just sees unrelated one-off addresses.
Here is the mechanism in plain terms. When someone pays you, their wallet generates a brand-new destination address derived from your public address, and that one-time address is what actually lands on the chain (source: Moneropedia, stealth addresses). Because every payment uses a different one, nobody can scan the ledger and total up what a single address has received. Your own wallet still finds the payments meant for you, using a private key we come back to later. For the full cryptographic detail, see how stealth addresses work. This is the layer that protects the person getting paid.
Ring signatures hide who sends
Ring signatures hide the sender by mixing your real coin with several decoys. The signature proves that one member of the group authorized the payment, but not which one, so nobody can point to you. The group is assembled on the spot from past coins on the chain, with no setup and no help from the decoys' owners.
Think of it like a note signed by "someone in this group," where the signature is valid but the specific author stays unknown. Monero pulls the decoy coins from the blockchain using a statistical method, and every possible signer looks equally real (source: Moneropedia, ring signatures). Because an observer cannot tell which coin was truly spent, older coins keep what the project calls plausible deniability, and that is also what keeps every XMR interchangeable. The deep dive on how ring signatures work covers the math and the ring size. This is the layer that protects the person paying.
RingCT hides how much moves
RingCT, short for Ring Confidential Transactions, hides the amount of every Monero payment while still letting the network prove that no coins were created out of thin air. It has been mandatory for all transactions since 2017. The ledger can still confirm that inputs equal outputs, without anyone seeing the actual figures.
Hiding amounts is harder than it sounds, because the network still has to check that the books balance. RingCT does this with cryptography that proves each output is a positive number and that the totals add up, all without revealing the numbers themselves (source: Moneropedia, RingCT). That requirement covers every Monero transaction, so there is no such thing anymore as a Monero payment with a visible amount. The full breakdown is in how RingCT hides amounts. With the sender, receiver, and amount all hidden, the on-chain record of a payment is essentially blank to an outsider.
Bulletproofs keep private transactions small and cheap
Bulletproofs are the upgrade that made Monero's hidden amounts practical to use. Proving an amount is valid without showing it used to make transactions large and expensive. Bulletproofs replaced that heavy proof with a compact one, cutting transaction size and fees sharply while keeping exactly the same privacy.
Every RingCT transaction has to carry a proof that its hidden amounts are legitimate. The early version of that proof was bulky, which meant big transactions and high fees. Bulletproofs, presented by a Stanford applied-cryptography group, are short zero-knowledge range proofs that need no trusted setup, and their size grows only slowly as more outputs are added (source: Bulletproofs, Stanford Applied Cryptography Group). After Monero adopted them, typical transaction sizes and fees fell by roughly 80 percent (source: Moneropedia, Bulletproofs). The detail is in how Bulletproofs shrink transactions. The lesson is that strong privacy also has to be efficient, or people will not use it.
Dandelion++ hides your network identity
Dandelion++ protects the one thing the other layers do not: your network address. When you send Monero, the transaction is announced to other computers, and that step could otherwise be traced to the device that broadcast it. Dandelion++ passes it through a randomized relay path first, so where it seems to enter the network is not where it began.
The tools above hide what is written on the chain, but a payment still has to reach the network, and that step can leak your IP address. Dandelion++ handles it by sending each new transaction along a quiet, random relay path before it is broadcast widely, which breaks the link between the transaction and its origin device (source: Dandelion++, Fanti et al.). It is a subtle layer, but without it, strong on-chain privacy could still be undone by simple network monitoring. The mechanics are in how Dandelion++ protects the network layer. Privacy on the wire matters as much as privacy on the ledger.
View keys and spend keys let you stay private, but auditable
Every Monero account has two private keys: a spend key that authorizes payments, and a view key that only reveals incoming ones. This split is what lets Monero be private by default yet transparent on your terms. You can hand someone your view key to prove what you received, without giving them any power to spend a single coin.
The spend key is the sensitive one. It is a 256-bit key that signs your transactions, and it can rebuild your whole wallet from the mnemonic seed, so it should never leave your control (source: Moneropedia, spend key). The view key works the other way. Sharing it lets an accountant, auditor, or tax office see every payment arriving at your address, which is why Monero describes itself as private, optionally transparent (source: Moneropedia, view key). One honest caveat: a view key shows incoming payments but not outgoing ones reliably, so a balance read from a view key alone is not the full picture. The complete guide is Monero view keys and spend keys, and if key pairs are new to you, the primer on public and private keys helps.
How the layers combine, and where the limits are
Put together, these layers hide the sender, receiver, amount, and network origin of every Monero transaction at once, which is why it is treated as one of the hardest cryptocurrencies to trace. No privacy system is perfect, though. Researchers have found weaknesses in older versions, and the project keeps upgrading to close them.
Here is the whole stack at a glance.
| Layer | What it hides |
|---|---|
| Stealth addresses | the receiver of a payment |
| Ring signatures | the sender of a payment |
| RingCT | the amount that moves |
| Bulletproofs | nothing new, but keeps the amount proof small and cheap |
| Dandelion++ | your network address at broadcast |
| View and spend keys | nothing by default; they let you reveal your own history on purpose |
To see how they work together, follow one payment. Say you send someone 5 XMR. Your wallet creates a one-time stealth address for them, so their real address never touches the chain. It signs the payment with a ring, so your coin hides among decoys and no one can prove you spent. RingCT conceals the amount while still proving the sums balance, and Bulletproofs keep that proof compact. Dandelion++ then relays the transaction along a random path, so your device is not the obvious source. Anyone watching the blockchain sees a valid payment that reveals no sender, no receiver, no amount, and no clear origin. That is the entire design working in a single transaction.
The strength comes from the combination. Any single layer helps, but together they leave an outside observer with almost nothing to work with. Honesty matters here, so it is worth being clear about the limits. In 2017 and 2018, researchers showed that older, smaller rings could sometimes be narrowed down (source: Wikipedia, Monero). Monero responded by raising the mandatory ring size and adding other fixes (source: Moneropedia, ring size). Work continues today on a next-generation design called Full-Chain Membership Proofs, meant to replace ring signatures and widen the anonymity set further, though it is still in development and not yet live (source: Monero roadmap). From BloFin's vantage as a regulated-market operator, this "untraceable by design" property is exactly why privacy assets sit awkwardly with compliance: the same features that protect an ordinary user also remove the transaction trail a regulated exchange is required to monitor. That is a design fact about Monero, not a verdict on the people who use it. For the bigger picture of what Monero is and where it fits, the hub guide on what Monero is ties it together.
Frequently asked questions
Can someone with serious resources still trace a Monero transaction?
Monero is designed to defeat ordinary blockchain analysis, and in practice it is considered one of the hardest coins to trace. Well-resourced analysts and firms do study it, and older or careless transactions have sometimes been narrowed down, especially before ring sizes were increased. But the layered design means there is very little to grab onto today. Treat Monero as strong privacy rather than guaranteed anonymity, and remember that user mistakes, not the protocol, are usually the weakest link.
Can I turn Monero's privacy off if I want to?
Not in the way you turn off a setting. Privacy applies to every Monero transaction automatically, so you cannot broadcast a transparent payment the way you can on some other coins. What you can do is choose to reveal your own activity by sharing your view key, which lets a specific person see your incoming payments. That is selective transparency you grant on purpose, not a switch that makes your transactions public to everyone.
What is a ring size, and does a bigger ring mean more privacy?
The ring size is how many coins your real one is mixed with when you spend, counting the decoys plus your genuine coin. A larger ring means more possible signers, so more places an observer has to consider, which generally strengthens sender privacy. Monero enforces a mandatory minimum ring size for everyone, which matters because uniform behavior is itself protective. If some users picked small rings, their transactions would stand out, so the network standardizes it.
If I share my view key, can that person spend my Monero?
No. The view key is read-only. It lets someone see payments coming into your address, which is useful for accounting, audits, or taxes, but it carries no power to move funds. Spending requires the separate spend key, which signs transactions and should never be shared. This is the whole point of Monero's two-key design: you can prove what you received without exposing the ability to spend it, so an auditor sees your history but never your money.
How is Monero's privacy different from using a VPN or a coin mixer?
A VPN hides your internet traffic but does nothing to the blockchain, and a mixer is an external service you send coins through to blur their trail, often for a fee and with real counterparty risk. Monero builds privacy into the protocol itself, so every transaction is private by default with no extra service, no fee to a mixer, and no trusted middleman. Dandelion++ also covers the network layer that a VPN would, though many users still run both.
Will quantum computers break Monero's privacy one day?
Possibly in the long run, and this is true of almost all of today's cryptocurrencies, not just Monero. The digital signatures that secure most coins were not designed to resist large-scale quantum computers, which do not yet exist at the needed scale. Post-quantum cryptography is an active research area across the whole field, and privacy protocols like Monero's would need upgrades to stay secure in that future. For now it is a known long-term risk, not an immediate one.
Researched and written by the BloFin Academy editorial team with AI-assisted drafting. Updated July 2026. Primary sources: the official Monero documentation and Moneropedia at getmonero.org, the Bulletproofs and Dandelion++ research papers, the Monero project roadmap, and the Monero entry on Wikipedia. All facts independently verified against cited documentation current as of July 2026.
This article is educational and general in nature, not financial, legal, or tax advice. Cryptocurrencies like Monero carry real risks, including price volatility, regulatory changes, exchange delistings, and the chance of losing funds through user error. No privacy system is perfect, and nothing here should be read as a promise of anonymity. Do your own research, and consider a licensed professional before making financial decisions. BloFin does not provide investment advice.