Public & Private Keys in Monero
Monero's unusual two-key design: spend keys and view keys, and what each one can do.
Most cryptocurrencies give you one public key and one private key. Monero is different — and that difference is the secret behind its privacy. Monero gives you two key pairs: a spend pair and a view pair. In this lesson you will learn what each key does, why splitting them is so clever, and how they combine into the address you share with the world.
Keys, Briefly
A key is just a very large secret number. In any cryptocurrency, a private key proves ownership and lets you spend, while a public key can be shared so others can pay you or verify you. The golden rule never changes: guard the private side, share the public side.
Monero's Two Key Pairs
Monero splits the job into two separate pairs:
- Spend keys — the private spend key is the master key that authorizes spending your funds. Whoever holds it controls the money. The public spend key is part of your address.
- View keys — the private view key can see incoming transactions destined for your wallet, but it cannot spend anything. The public view key is also part of your address.
Put simply: the spend key spends, the view key only watches. This separation does not exist in Bitcoin and is unique to Monero's privacy design.
Why a Read-Only Key Is So Useful
Because the private view key can read your incoming funds without being able to move them, you can safely hand it to someone — or to a piece of software — to watch your wallet without risking theft. This enables a watch-only wallet: a wallet loaded with your address and private view key that can see your balance and confirm payments, but can never spend.
This is incredibly handy for accountants, donation transparency, auditing, or monitoring a cold wallet from an everyday device. We explore it fully in the advanced lesson on watch-only and auditing. Hardware wallets use the same idea: your desktop holds the view key to display funds, while the device guards the spend key.
How Your Public Address Is Built
Your shareable Monero address is derived from your public spend key and public view key bundled together (plus a checksum). A standard Monero address is a long string starting with the digit 4. When someone pays you, their wallet uses your public keys to create a brand-new, one-time stealth address on the blockchain, so your real address never appears publicly. That mechanism is the heart of stealth addresses, and it is why two people paying you cannot tell they paid the same person.
Where Do These Keys Come From?
You do not pick these enormous numbers yourself. When you create a wallet, it generates them for you and represents the master secret as a human-friendly 25-word seed phrase. From those words your wallet can mathematically rebuild every key — spend and view, private and public — and therefore your entire wallet. That is why the seed is the only backup you truly need, as covered in Your Seed Phrase.
The hierarchy looks like this:
- Seed phrase (25 words) — backs up everything.
- Private spend key — can spend; derives the private view key.
- Private view key — can see incoming funds only.
- Public keys and address — derived from the private keys, safe to share.
What This Means for You
- Anyone with your private spend key (or your seed) can take your funds. Protect it like cash.
- Your private view key reveals your incoming history but cannot steal — share it only deliberately.
- Your address and public keys are safe to post anywhere.
You can read formal definitions of these terms in the community-maintained Moneropedia.
Two key pairs may sound like extra complexity, but it buys something powerful: the ability to watch without the power to spend. Keep the spend side secret and you are safe. Next we will look at the single backup that protects all of these keys at once — your 25-word seed phrase.
Comments
Log in or create a free account to comment.
No comments yet — be the first.