We’re rewarding the question askers & reputations are being recalculated! Read more.
21

The MyMonero wallets use a different type of mnemonic: 13 words instead of 25 words. The Monero Core GUI (or the CLI) doesn't support restoring a wallet from a 13 word mnemonic seed. Therefore, you'll need to go via the keys. In MyMonero, once logged in, click on the Accounts drop-down menu, and choose Account Details: Next, the "Review Account Details" ...


18

There was evidence of several cases of Tor exit nodes injecting JavaScript into the page. The developers of MyMonero did not want to risk MITM attacks leading to more theft of Monero funds. At some point in the future, time permitting a better Tor hosting infrastructure may allow Tor to be re-enabled. Right now there are higher priorities. Security concerns ...


15

The fact that it never gets access to the your private spend key. The workings of the site are explained here. Your monero are "kept" on the blockchain and not on the site itself. The site is just an interface to tell the network you want to move your monero, where all the cryptography to spend the coins (using your private spend key to sign the transaction)...


15

Thanks to deterministic key derivation, the private spend key is an alternate representation of the mnemonic seed. Both the mnemonic seed and private spend key can be used to derive all other keys The private spend key is used to sign Monero transactions. Simplewallet mnemonics seed are comprised of 25 words with the last word being used as a checksum. ...


14

First, theoretical background can be found here: Selective transparency in Monero vs Zcash Why is the viewkey able to track incoming transactions, but not outgoing transactions? Is there any way to construct a transaction manually? Basically the gist is that you know a (the private view key) and R (the public tx key). As a result, you are able to compute ...


11

When you send a Monero transaction the sum of the outputs used in the ring transaction will exceed the amount of your payment. Once the transaction is confirmed the change is returned to your wallet. Change like all incoming transactions is unlocked after 10 blocks. Change: Monero sent as part of a transaction, but unique in that returns to your account ...


10

The number of ways to arrange n distinct objects is simply n! (n factorial), so for 13 unique words (I don't believe they're allowed to have repeats repeats are allowed, but the probability of getting a repeat for 12 words selected randomly from 1500 is pretty low, about 5%), you could arrange them in 6227020800 different ways, however the final word is a ...


9

Yes, it's less secure because it's 128bits of entropy in the 13-word seed vs 256bits of entropy in the 25-word seed. However, it's considered safe enough as it would again take an impossible* amount of time to generate a collision. The process for mymonero is: mnemonic -> seed -> private spend & private view keys The process for simplewallet is: ...


9

Re-scanning the blockchain from 0 consumes server resources and takes time. The fee is there to discourage this use case, but providing the utility if it's really required for some users. If a new wallet is generated, the server doesn't need to re-scan the blockchain as it knows that the wallet has not been used before.


8

There's a daemon (monero core) running on the MyMonero server. When you go to mymonero.com and make a new webwallet, there's a script in the browser that sorta functions like wallet software. The browser script creates a new set of keys (spend and viewkey). The viewkey is transmitted to the mymonero server. The server uses the viewkey to find out which ...


7

At the beginning, when we designed the mnemonic seed mechanism, the spec was to have a seed derived from the mnemonic, hash it to produce the spend key, and hash it again to produce the view key. Somewhere in the implementation this spec got lost, and instead the seed derived from the mnemonic was the spend key, and the viewkey was hashed from that. When ...


7

Yes. In the mean time, a Chrome application have been released to largely reduce the security limits of MyMonero (that come from the concept of a web wallet rather than errors from the developer). https://chrome.google.com/webstore/detail/safer-mymonero/hcgliilmeggjhmpkfglnekbegacockei It protects you from "JS modifications, HTML injections, HTTP ...


7

They are hardcoded in the wallet software, not the protocol. That said, the protocol expects a non-zero fee for each transaction. The Monero protocol does not do fee free transactions so that it can prevent node, and blockchain spamming. Nodes also have the option of deciding which fee paying transactions they will relay of not, and if an enterprising users ...


7

I am not aware of any warrant canary existing at the moment. Monero (unlike ZCash and Dash) doesn't have any central authority - an organisation, that could receive the subpoena secret order or equivalent. Each node in network is equal to the rest of nodes and nodes are running opensource code that is developed in the open on GitHub. Multiple people monitor ...


6

Any reason why? TL;DR: It's a different convention. Monero is not a fork of Bitcoin, so most things were worked out from scratch. Does this mean that mymonero-simplewallet wouldn't accept a Bitcoin-style seed phrase I generated inside electrum(and not inside monero)? Yes Neither seed type would be accepted in the current implementation of monero-...


6

If "someone" doesn't have access to any of the services, there's no way he can tell that the final TX is connected to you. If "someone" had access to only ShapeShift data, he'd know to which Monero address you withdrew, and how much. He could suspect when you move those funds elsewhere but never be sure if it was you or it just so happened that someone else ...


6

An 'unexisting address', probably due to a typo, would mean that there would be no known private keys corresponding to the address that funds were sent to. This should be protected against to some degree, because every Monero public address has an in-built checksum to help prevent typos. Since it's impossible to determine private keys from a Monero address, ...


5

Yes, the start_mining <addr> command will send your mined Monero directly to the address you specify. Most people that run their own full node will mine to a local wallet, but mining to a web wallet while not necessarily recommended for privacy reasons is possible. Mining directly to an exchange is only possible if the exchange supports integrated ...


5

To add to what Jolly Mort correctly said (rescanning the blockchain is a heavy process on the server, which the Mymonero operators want to discouraged), it is possible to have a wallet created in Mymonero, then import it in simplewallet. This will not incur a fee in Mymonero, and you will have a wallet which you can use in both. See for instance If I saved ...


5

MyMonero uses 13 word mnemonic seeds and simplewallet uses 25 word mnemonic seeds. MyMonero can recover a wallet created in either format. Currently simplewallet can only recover wallets with 25 word mnemonic seeds but there is code available to recover 13 word mnemonic seed wallets in case MyMonero ever disappears: int main(int ac, const char* av[]) { ...


5

The frontend has been updated recently and does not redirect to the no-javascript version automatically if you have javascript disabled. This is clearly a mistake and should be fixed soon. For the time being you can access explicitly the no-javascript version at https://xmr.to/nojs Note that if you access it on its onion address at http://xmrto2bturnore26....


4

Ronrunner, you can't export Bitcoin to Monero, if that's what you're asking - you have to trade Bitcoin for Monero on an exchange, such as Poloniex or Bittrex. There are a number of differences between Bitcoin and Monero, including: Monero uses ring signatures to achieve on-chain mixing of your transactions to make transactions untraceable; Bitcoin uses ...


4

I don't know if it actually does that, but the client side code could generate key images when refreshing, and send them back to Mymonero, which can store them and look for them for then on. Alternatively, the client could send key images with a refresh request, and Mymonero doesn't need to store them.


4

According to fluffyponyza the fee is 50% on top of the miner fee (with n fee when and it month hosting costs have been recovered: 50% on top of the miner fee, so the old fees were 0.01 XMR per kb, and if you used MyMonero it was 0.015 XMR per kb. With the new fees it's 0.002 XMR per kb, and 0.003 XMR per kb with MyMonero. We also have an algorithm to turn ...


4

According to the bottom of this CoinTelegraph article: The Jaxx team clarified that they halted work on Monero due to recent protocol changes that caused difficulties, and because the integration had gone significantly over time and budget, and was therefore hindering development for the 1.2 release. There was a large divide in the community, and I ...


4

No. You can obtain them from the seed mnemonic (25 words) if you saved those. If it was possible from the address, then anyone could steal anyone's money. If you already created the wallet from the keys/seed, you can get them from the wallet. If you just made the address, and closed the window without saving the mnemonic words or keys - that wallet is gone ...


4

There was a protocol upgrade recently, and you're using an old version. Upgrade to latest version and it will continue syncing. How do I upgrade my software to v0.11.0.0?


4

Yes, it's possible to get it out, although the process is a bit complicated, because MyMonero does not use the standard 25-word seeds. Use https://xmr.llcoins.net to convert your MyMonero 13-word seed into a standard Monero public address, private view key and private send key. This is very risky and requires that you trust the website. If you don't (and ...


3

I don't believe it was due to a lack of API support since documentation is available. I've been able to interact with the daemon and monero-wallet-rpc using cURL from the command line and with PHP. You can see available documentation here: https://getmonero.org/getting-started/merchants https://getmonero.org/knowledge-base/developer-guides/


3

According to site operator fluffyponyza there should be an error message that explains this: The site you are visiting is NOT the real MyMonero! Please make sure that in future you type mymonero.com into your address bar, and don't click on links to visit the site. Note that you may also see this message when trying to access MyMonero on Tor, as ...


Only top voted, non community-wiki answers of a minimum length are eligible