How Monero's Dandelion++ Hides Your IP Address
Monero hides who is paying, who is being paid, and how much, but there is one layer it cannot cover on its own: the network. When your wallet broadcasts a transaction, the node that first sends it out can reveal your IP address to anyone watching the peer-to-peer network. Dandelion++ is the protocol that tackles Monero IP privacy at exactly this stage. It changes how a transaction spreads so that observers struggle to tell which node, and therefore which person, actually originated it.
The IP leak Dandelion++ is built to fix
Monero's famous privacy features protect the contents of a transaction. They do nothing about the network plumbing underneath. When your transaction enters the peer-to-peer network, it normally floods outward to many nodes at once.
An observer running enough listening nodes can watch where each transaction first appears and make a strong guess about which IP address introduced it. Link that IP to a person and you have undone a lot of the privacy that the transaction itself worked so hard to protect. This is the specific gap Dandelion++ addresses.
Two phases: stem and fluff
Dandelion++ splits broadcasting into two stages. The first is the stem phase. Instead of shouting your transaction to everyone, your node passes it quietly along a line of peers, one hop at a time, like a secret being whispered down a chain.
After a number of hops the transaction enters the fluff phase, where one node finally broadcasts it widely the normal way. By the time it goes public, it is being announced from a node several steps removed from where it began, so the original source is buried.
Why the relay path breaks the link
The value of the stem phase is that whichever node fluffs the transaction is usually not the one that created it. An observer who sees the loud public broadcast is looking at a relay, not the origin.
Because the stem path is randomized and changes over time, an attacker cannot simply assume the first node they see is the sender. The whispering chain inserts distance and uncertainty between your wallet and the moment the transaction becomes visible to the whole network, which is exactly what spoils the easy guess.
What Dandelion++ does not do
Being precise matters here. Dandelion++ makes it harder to pin a transaction's origin to an IP, but it is a statistical defense, not an invisibility cloak. A powerful adversary watching large parts of the network can still chip away at the protection.
It also does nothing about other ways your IP can leak. If you connect to a node over a clear internet connection, that node still sees your address when you sync or query it. Dandelion++ handles the broadcast stage, not every interaction your wallet has with the network.
Pairing it with Tor for stronger cover
For serious network privacy, the standard advice is to route Monero traffic through Tor or a similar anonymizing layer. Tor hides your IP from the nodes you talk to in the first place, covering the gaps Dandelion++ leaves open.
The two work well together. Tor conceals your address from the node you connect to, and Dandelion++ obscures the origin of the transaction as it propagates. Using both gives you defense in depth rather than relying on either one alone.
Where network privacy meets the rest of your privacy
Strong on-chain privacy loses some of its punch if your network metadata gives you away, which is why Dandelion++ is a meaningful part of Monero's design rather than an afterthought. It is one piece of a layered approach that covers the transaction itself and the path it travels.
The same mindset applies when you move in and out of Monero. You can swap with no KYC and non-custodially, and running that over Tor keeps your network footprint as quiet as your on-chain one. Privacy holds up best when every layer is considered, from the addresses in your transaction to the route it takes across the network.
Swap into or out of Monero, no KYC
MoneroSwap is non-custodial, no account, no KYC, no logs, 0% fee right now, open source, and available over Tor. Verify every claim, then pick a pair and swap into Monero. New here? Start with the FAQ.
← All guides