What Is a Monero View Key and When to Share It

The four keys in a Monero wallet

A standard Monero wallet is built from four keys, not one. You have a private spend key, a private view key, and their two matching public counterparts. Your wallet address is essentially the two public keys packed together into the long string you share to receive funds.

The private spend key is the one that matters most. It is the only key that can authorize sending Monero out of your wallet, and it is the one your seed phrase ultimately protects. The private view key is the quieter sibling. It can read incoming transactions destined for your address, but it can never move a single coin.

What the view key actually reveals

Give someone your private view key along with your public address and they can scan the blockchain for outputs sent to you. They will see incoming amounts and roughly when those funds arrived. For an auditor or a tax preparer, that is often exactly what they need.

There is an important limit worth understanding. The view key reveals money flowing in, but on its own it does not reliably show your outgoing payments or your true spendable balance. Outgoing transactions involve change outputs and ring signatures that a plain view key cannot fully untangle, which is why a view key is closer to a read-only deposit log than a full bank statement.

What sharing a view key can never do

This is the part that lets people relax. The private view key carries zero spending authority. Someone holding it cannot sign a transaction, cannot drain your wallet, and cannot reverse anything. Spending requires the private spend key, which the view key does not contain and cannot derive.

So the worst case from sharing a view key is a privacy loss, not a theft. The person you shared it with gains visibility into incoming payments to that address, forever, until you move to a new address. That is a real cost, but it is a privacy cost, not a custody risk.

Good reasons to share your view key

The classic case is auditing. A business that accepts Monero can hand its view key to an accountant or a regulator so they can verify incoming revenue without ever being able to touch the funds. Charities and public projects sometimes publish a view key so anyone can confirm donations arrived.

View-only wallets are another everyday use. You can load just the view key onto a phone or a less trusted machine to watch for incoming payments, while the spend key stays offline on hardware or a cold device. The watching machine sees the money land but could never spend it even if it were compromised.

When NOT to share it, and how to think about the risk

Do not share a view key for an address you care about keeping private if you do not fully trust the recipient. Once revealed, that visibility cannot be taken back for that address. Anyone with the key can correlate your incoming payments over time, which can quietly erode the financial privacy that drew you to Monero in the first place.

If you only need to prove a single payment rather than your whole incoming history, you usually do not need to expose the view key at all. Monero wallets can generate a transaction proof for one specific payment, which confirms that one transfer without revealing everything else that ever arrived.

Proving a payment without oversharing

Most desktop and CLI Monero wallets include a get-proof or check-proof feature. The sender produces a short cryptographic proof tied to a single transaction, and the recipient verifies it against the transaction ID. No view key changes hands, and no broader history leaks.

Reach for the targeted proof when the question is did this exact payment happen, and reserve the view key for ongoing read-only access like audits or monitoring. Matching the tool to the need keeps you from giving away more visibility than the situation actually calls for.

Where this fits when you swap into Monero

Understanding view keys matters the moment you start holding XMR, because it shapes how you prove receipts and let trusted parties look in without losing control. When you swap into Monero with no KYC and non-custodially, the coins land in a wallet whose keys are yours alone from the first confirmation.

From there the choice is entirely yours: keep the view key fully private, spin up a watch-only wallet for convenience, or hand the key to an auditor when there is a real reason. The spend key, and therefore your money, never has to leave your hands to do any of it.

View key and spend key, side by side

The clearest way to hold this in your head is that the view key is read access and the spend key is write access. Someone with your private view key can watch money arrive. Someone with your private spend key can take it. They are separate secrets and giving away one does not give away the other.

Your wallet actually holds four values: a public spend key, a public view key, a private spend key and a private view key. The two public keys together form the address you hand out. The private view key is the one you might occasionally share on purpose. The private spend key is the one that must never leave your control.

Your twenty-five word seed encodes the private spend key, and every other key is derived from it. That is why the seed is the thing to protect above all else. Anyone who has it can regenerate the whole wallet, view key included.

How to find your view key

In the official GUI wallet, open Settings and then the Wallet tab, where there is a Show seed and keys option. You will be asked for your password, and you will then see the address, the seed, and both the view and spend keys. The private view key is the one labelled secret view key.

In the CLI wallet the command is viewkey, which prints both the secret and public view keys. If you only want the public one, the address itself already encodes it.

Treat the screen you are looking at as sensitive. Do not photograph it, do not paste it into a notes app that syncs, and be aware that anything on screen can be captured by other software on the machine. If you need to hand a view key to someone, send it over a channel you would be comfortable sending a password over.

Watch-only wallets, and what they are for

A watch-only wallet is built from your address plus your private view key. It syncs the chain, decrypts the payments that belong to you, and shows your incoming balance. It cannot construct a spend, because it has no spend key.

This is genuinely useful. You can run a watch-only wallet on a machine you do not fully trust, such as a laptop you travel with or a server you use for monitoring, while the spending keys stay on a device that never goes online. A merchant can watch for incoming payments on a till system without that system being able to move funds.

The limitation is that a watch-only wallet has an incomplete picture of what you have spent, which is the subject of the next section and the thing most people get wrong about view keys.

The outgoing transaction problem

A view key shows incoming funds reliably. Outgoing funds are a different matter. Because Monero hides which output in a ring was actually spent, a watch-only wallet cannot tell for certain which of your outputs have already gone out the door.

The practical effect is that a watch-only wallet often shows a balance that is too high, because it counts outputs you have already spent. Newer wallet versions improve this by letting you import a key image file exported from the full wallet, which tells the watch-only copy which outputs are gone.

So if you hand someone your view key and they tell you your balance looks wrong, this is usually why. It is a property of how Monero achieves privacy rather than a bug, and it is worth understanding before you rely on a watch-only wallet for accounting.

What an auditor or accountant actually needs

If someone needs to verify your incoming funds, the view key plus your address is enough and is the standard way to do it. They can independently confirm every payment that arrived, the amounts, and when. They cannot spend, and they cannot forge a payment that did not happen.

For outgoing transactions, the correct tool is not the view key. Monero supports generating a spend proof for a specific transaction, which demonstrates that you sent a particular payment without revealing anything else. Give one proof per transaction that needs verifying rather than handing over standing read access to everything.

That distinction matters for scope. A view key is permanent and covers your entire receiving history, past and future. A transaction proof covers exactly one payment. Most requests that people answer with a view key would be better answered with a proof.

You cannot take a view key back

There is no revocation. Once someone has your private view key they can watch that wallet for as long as it exists, including payments that arrive years later. There is no setting that cuts them off and no way to rotate the key while keeping the same address.

The only real remedy is to create a new wallet with a new seed and move your funds to it. That is a genuine cost and it is why sharing a view key deserves more thought than it usually gets.

If you anticipate ever needing to give someone read access, plan for it in advance by keeping a separate wallet for the funds that will be audited. Then the view key you hand over covers only what you intended, and your other funds are untouched by the decision.

View keys and tax reporting

In jurisdictions where you need to report crypto holdings or gains, a view key is one way to let an accountant reconstruct your incoming history without giving them the ability to move anything. It is a reasonable use and one of the few where the permanence is not a problem, since the relationship is ongoing anyway.

The gap is again outgoing transactions. Your accountant will need disposals as well as acquisitions, and the view key will not give them a reliable picture of those. Expect to supply transaction proofs or your own records alongside it.

None of this is tax advice, and rules differ enormously by country. The technical point is simply that Monero gives you a way to prove what you received to a specific person without publishing it to everyone, which is a middle ground transparent chains do not offer.